Privacy Policy

This Privacy Policy explains how Stratiline Labs, the owner and operator of Batonic ("Stratiline Labs," "Batonic," "we," "us," or "our"), collects, uses, stores, discloses, and otherwise processes personal information when you use Batonic, including our websites, applications, APIs, transaction services, content-delivery services, Storefronts, Batons, and related features (collectively, the "Platform").

This Privacy Policy applies to personal information processed by Batonic in connection with the Platform. It does not govern the independent privacy practices of third parties, including Sellers, Buyers, payment processors, shipping carriers, websites reached through external links, or other services that operate under their own privacy policies.

By using Batonic, you acknowledge the practices described in this Privacy Policy. Where applicable law requires consent for a particular processing activity, Batonic will request that consent separately.

Batonic is operated from the United States.

---

1. Who Controls Your Information

Stratiline Labs operates Batonic and is responsible for the personal information that Batonic determines how and why to process.

In some Transactions, another User may separately determine how to use information they receive through Batonic. For example, a Seller may receive a Buyer's name, shipping address, order details, or communications when necessary to fulfill a Transaction. In that situation, the Seller may have independent legal responsibilities regarding information in the Seller's possession.

Payment processors, shipping carriers, identity-verification providers, and other third parties may also process personal information under their own terms and privacy policies.

Questions or privacy requests concerning Batonic may be sent to:

support@batonic.app

2. Scope

This Privacy Policy applies to personal information Batonic processes when you:

- visit or browse Batonic; - create or use an Account; - create, operate, follow, or interact with a Storefront; - create, publish, preview, sell, buy, license, gift, or download a Baton; - use checkout, invoices, Wallet, payouts, inspection periods, refunds, disputes, or other transaction tools; - arrange shipping, local delivery, pickup, or service fulfillment; - use messages, reviews, follows, wishlists, support, or other interactive features; - submit files, descriptions, images, video, code, documents, 3D models, or other User Content; - use Batonic APIs or integrations; - communicate with Batonic; or - otherwise interact with the Platform.

This Privacy Policy does not apply to information that is not personal information under applicable law or to information that has been lawfully deidentified or aggregated so that it cannot reasonably be linked to an identified or identifiable individual.

3. Age Eligibility, Teen Users, and Parental or Guardian Consent

Batonic is intended for Users who are at least thirteen (13) years old. Batonic is not directed to children under 13, and children under 13 may not create an Account or use Batonic.

If you are at least 13 but under 18, you may use Batonic only with the consent and supervision of a parent or legal guardian. Your parent or legal guardian must agree to the Batonic Terms of Service on your behalf and accept responsibility for your use of the Platform to the extent permitted by applicable law.

Batonic may require a parent or legal guardian to provide information reasonably necessary to confirm consent, authority, identity, or responsibility for a User who is under 18. We may maintain records showing that parental or guardian consent was obtained.

Certain selling, payment, payout, financial, identity-verification, local-delivery, or other Transaction features may require additional parental or guardian verification, may be subject to requirements imposed by a payment processor or other service provider, or may be unavailable to Users under 18 where applicable law or a third-party provider does not permit the feature.

A parent or legal guardian who consents to a User between 13 and 17 using Batonic should review the User's activity and help the User understand these privacy practices, the Terms of Service, Transaction obligations, and the risks associated with buying, selling, publishing, messaging, local pickup or delivery, and sharing information online.

Batonic does not knowingly seek to collect personal information from children under 13. If we learn that a child under 13 has provided personal information to Batonic, we may restrict or close the Account, delete or remove information as required by law, seek legally valid parental consent only where Batonic expressly supports such a process, or take other action required or permitted by applicable law.

Parents or guardians who believe a child under 13 has provided personal information to Batonic, or who have questions about a teen User's Account or consent, may contact support@batonic.app.

4. Categories of Information We Collect

The information Batonic collects depends on how you use the Platform. We may collect the categories described below.

4.1 Account Information

When you create or manage an Account, we may collect information such as:

- name; - username or handle; - email address; - profile image; - biography or profile description; - city, state, region, or country when provided; - authentication information; - account preferences; - language and display preferences; - notification settings; - account creation and status information; - parent or legal guardian contact, verification, and consent information when applicable to a User under 18; and - information you choose to add to your profile.

We may receive limited account information from third-party authentication providers if you choose to sign in using a supported third-party account.

4.2 Storefront and Seller Information

If you create, operate, or assist with a Storefront, we may process:

- Storefront name and handle; - Storefront images, branding, descriptions, and public profile information; - seller contact information; - business or organizational information you choose or are required to provide; - Storefront ownership and permission records; - payout status and identifiers; - seller verification status; - tax or compliance status information; - sale and refund history; - Storefront settings; - follower information; - ratings and reviews; and - information necessary to administer Seller features.

Some seller verification, tax, banking, identity, or payout information may be collected directly by a third-party payment or verification provider rather than by Batonic.

4.3 Baton and User Content

We process User Content that you submit to or through Batonic, including:

- Baton titles and descriptions; - images, video, audio, documents, source code, archives, 3D models, and other uploaded files; - previews, thumbnails, and generated representations; - product specifications; - service descriptions; - pricing; - license terms; - package and option selections; - milestones and deliverables; - fulfillment information; - rich-description content; - reviews; - comments or other public contributions; - content submitted in disputes or support requests; and - metadata associated with uploaded content.

User Content may contain personal information about you or other people. You are responsible for ensuring that you have a lawful basis and any required permissions to upload personal information about another person.

4.4 Transaction and Commercial Information

When you buy, sell, license, gift, refund, or otherwise transact through Batonic, we may process:

- Transaction identifiers; - Baton purchased or sold; - price and Platform fees; - discounts and promotional information; - selected packages, variants, options, or add-ons; - order date and status; - invoices and receipts; - payment status; - payout status; - refunds and partial refunds; - inspection-period status; - dispute status; - milestones; - fulfillment records; - subscription status where applicable; - gift information; - Transaction snapshots; and - other records necessary to administer the Transaction.

Batonic may retain the material terms of a Transaction as they existed at the time of purchase so that later changes to a Baton do not overwrite the record used for fulfillment, support, refunds, fraud prevention, accounting, or disputes.

4.5 Payment and Payout Information

Payments and payouts may be processed by third-party payment providers.

Depending on the payment feature used, those providers may collect:

- payment-card information; - bank-account information; - billing information; - legal name; - date of birth; - government identification; - tax identifiers; - business information; and - other information required for payment processing, identity verification, fraud prevention, tax reporting, sanctions screening, or financial compliance.

Batonic is not designed to store full payment-card numbers or card security codes when those credentials are collected directly by a payment processor.

Batonic may receive and process limited payment-related information such as:

- payment processor customer or account identifiers; - transaction tokens; - payment method type; - card brand and partial card information such as the last four digits when provided by the processor; - payment success or failure status; - chargeback status; - connected-account status; - verification status; - payout eligibility or payout status; and - other information necessary to reconcile and administer Transactions.

4.6 Shipping, Delivery, Pickup, and Service Information

When a Transaction requires fulfillment, we may collect or process:

- recipient name; - shipping address; - billing address when needed; - delivery address; - pickup location; - service location; - delivery instructions; - carrier and tracking information; - package information; - delivery confirmation; - local delivery radius or eligibility information; and - other information needed to fulfill or verify the Transaction.

Information necessary for fulfillment may be disclosed to the Seller, Buyer, shipping carrier, delivery provider, or other party involved in completing the Transaction.

4.7 Location Information

Batonic may process location information when you choose to use features that depend on location.

This may include:

- city, state, region, or country you provide; - shipping, pickup, delivery, or service addresses; - approximate location inferred from an IP address; and - more precise device location if you affirmatively grant permission to a Batonic application or browser feature that requests it.

Precise device location is used only when necessary for a requested location-based feature or another purpose disclosed at collection, subject to applicable law and device permissions.

You can generally control device-location permissions through your browser or operating-system settings, although disabling location may prevent some local-delivery, pickup, nearby, or service-area features from working properly.

4.8 Messages and Communications

When you use Batonic messaging or communication tools, we may process:

- message contents; - attachments; - sender and recipient identity; - the Account or Storefront identity used in the conversation; - timestamps; - delivery or read status where supported; - conversation metadata; and - reports or moderation information associated with a conversation.

Batonic may access or review communications when reasonably necessary to operate the feature, investigate reports, prevent fraud or abuse, resolve Transactions or disputes, enforce our Terms, protect Users, or comply with law.

4.9 Reviews, Follows, Wishlists, and Social Features

We may process:

- reviews and ratings you submit; - Storefronts or creators you follow; - followers; - Batons saved to wishlists; - gifts; - engagement with public content; - reports and blocks; and - other activity associated with social or discovery features.

Whether this information is public, private, or visible to another User depends on the feature and the settings presented in the Platform.

4.10 Support and Dispute Information

If you contact support or participate in a Transaction dispute, we may collect:

- your contact information; - support messages; - Transaction records; - evidence; - photographs or screenshots; - uploaded documents; - files or deliverables; - shipping or tracking information; - communications between Users; - technical logs relevant to the issue; and - other information you choose or are asked to provide.

We may preserve relevant Transaction or dispute evidence even if related content is later edited or removed from its ordinary Platform location, where reasonably necessary for dispute resolution, fraud prevention, legal compliance, enforcement, or defense of legal claims.

4.11 Device, Network, and Usage Information

When you access Batonic, we may automatically collect technical information such as:

- IP address; - browser type and version; - operating system; - device type; - language; - time zone; - referring and exit pages; - request timestamps; - pages, screens, or features viewed; - navigation and interaction information; - session identifiers; - cookie or similar technology identifiers; - application version; - crash information; - performance information; - network information; - API request metadata; - rate-limit information; and - diagnostic logs.

4.12 Security, Fraud, and Abuse Information

To protect Batonic and its Users, we may collect or generate information relating to:

- login attempts; - authentication events; - suspicious sessions; - device or network indicators; - rate-limit events; - suspected fraud; - chargeback abuse; - sanctions or compliance screening; - prohibited-content reports; - malware or security detections; - Account restrictions; - enforcement history; - attempts to circumvent Platform limits; - unusual Transaction activity; and - other signals used to protect the Platform.

4.13 Information From Third Parties

We may receive personal information from third parties, including:

- payment processors; - identity or compliance providers; - authentication providers; - shipping or delivery providers; - fraud-prevention or security services; - analytics providers; - other Users involved in a Transaction; - people who submit reports or disputes; - service providers acting on our behalf; and - public sources where lawful and relevant to security, fraud prevention, sanctions, intellectual-property enforcement, or legal compliance.

5. Sensitive Personal Information

Depending on the features you use, Batonic or its service providers may process information that some laws consider sensitive, including:

- account credentials; - precise geolocation when expressly enabled; - payment or financial-account information; - government identifiers or identity-verification information handled in connection with seller onboarding or financial compliance; - information contained in private communications or dispute evidence; and - other information treated as sensitive under applicable law.

We use sensitive personal information only for purposes reasonably necessary to provide requested services, process Transactions, authenticate Users, protect accounts, prevent fraud, comply with law, fulfill orders, administer payouts, resolve disputes, secure the Platform, or for other purposes permitted by applicable law.

Batonic does not use sensitive personal information for the purpose of inferring highly sensitive personal characteristics for unrelated advertising purposes.

6. How We Use Personal Information

We may use personal information for the following purposes.

6.1 Provide and Operate Batonic

We use information to:

- create and maintain Accounts and Storefronts; - authenticate Users; - obtain, record, or verify parental or guardian consent for eligible Users under 18 where applicable; - provide Baton creation, discovery, preview, checkout, delivery, and Library features; - process and administer Transactions; - provide invoices, receipts, order history, Wallet information, and other records; - enable messages, reviews, follows, wishlists, gifts, and other Platform features; - support shipping, pickup, local delivery, service areas, and milestones; - provide customer support; - maintain settings and preferences; and - otherwise provide functionality requested by Users.

6.2 Process Transactions and Payouts

We use information to:

- calculate charges and Platform fees; - process or facilitate payments; - route Transaction proceeds; - administer payout eligibility; - process refunds and partial refunds; - administer inspection periods; - maintain Transaction snapshots; - respond to chargebacks; - reconcile financial records; - identify duplicate or suspicious Transactions; and - support tax, accounting, and financial-compliance obligations.

6.3 Fulfill Orders and Services

We may use and disclose information necessary to:

- ship physical goods; - coordinate local delivery or pickup; - determine service-area eligibility; - deliver digital content; - manage milestones; - communicate fulfillment status; - verify delivery or completion; and - allow Buyers and Sellers to complete the Transaction they requested.

6.4 Protect Users and the Platform

We use information to:

- prevent fraud, scams, money laundering, account takeover, spam, malware, and abuse; - detect prohibited goods, services, or content; - enforce Platform rate limits and technical restrictions; - identify attempts to evade suspensions or Platform rules; - investigate reports and suspicious activity; - protect payment and payout systems; - secure accounts and infrastructure; - preserve evidence; - investigate security incidents; - enforce the Terms of Service and other policies; and - protect the rights, safety, property, and integrity of Users, Stratiline Labs, and others.

6.5 Resolve Disputes and Provide Transaction Protections

We may use Transaction information, communications, files, photographs, tracking data, inspection activity, Baton descriptions, snapshots, and other evidence to:

- investigate a dispute; - determine whether a Baton was materially misrepresented; - determine whether fulfillment occurred; - administer refunds or partial refunds; - determine whether Transaction proceeds should be released or restricted; - respond to a payment dispute or chargeback; and - protect the integrity of Batonic's transaction-protection systems.

6.6 Personalize and Improve Batonic

We may use information to:

- remember preferences; - personalize discovery and recommendations; - improve search results; - improve accessibility and usability; - evaluate feature performance; - troubleshoot errors; - understand how Users interact with the Platform; - develop new functionality; - test changes; and - improve reliability, safety, and performance.

Where required by law, Batonic will provide notices or choices applicable to personalization that uses personal information.

6.7 Communicate With You

We may use contact information to send:

- account and security notices; - Transaction updates; - purchase and payout information; - support responses; - dispute updates; - policy or legal notices; - service announcements; - requested notifications; and - marketing or promotional communications where permitted by law and consistent with your choices.

You may opt out of nonessential marketing email using the unsubscribe mechanism provided in the communication or applicable Platform settings. Transactional, security, legal, and service communications may still be sent when necessary.

6.8 Comply With Law

We may process information to:

- comply with subpoenas, warrants, court orders, and other valid legal process; - respond to lawful requests from authorities; - satisfy tax, accounting, sanctions, export-control, anti-fraud, or financial-compliance requirements; - comply with intellectual-property laws; - process legally valid privacy requests; - establish, exercise, or defend legal claims; and - meet other legal obligations.

7. Automated Systems, Moderation, and Fraud Detection

Batonic may use automated systems, rules, heuristics, machine-learning tools, or similar technologies to assist with:

- spam detection; - malware detection; - fraud prevention; - payment-risk signals; - prohibited-content detection; - account security; - duplicate or suspicious activity detection; - abuse prevention; - marketplace integrity; - content classification; - recommendation and search features; and - prioritization of reports for human review.

Automated tools may make mistakes. Where appropriate, Batonic may use human review, additional evidence, or an appeals process before or after taking enforcement action.

Where applicable law grants a right relating to certain automated decisions that produce legal or similarly significant effects, Batonic will provide the notice, access, opt-out, appeal, or other rights required by that law.

8. Public and Nonpublic Information

Some Batonic features are designed to make information public.

8.1 Information That May Be Public

Depending on your settings and use of the Platform, public information may include:

- Account display name or handle; - profile image; - public biography; - city or country if you choose to display it; - Storefront name, handle, branding, description, and public profile; - public Batons; - Baton descriptions, prices, previews, images, and other listing information; - public reviews and ratings; - follower or following information where the feature is designed to display it; - public creator or Seller information; and - other information clearly identified as public when submitted.

Public information may be viewed, indexed, copied, captured, or redistributed by other people or services outside Batonic. Batonic cannot control what third parties do with information after it has been lawfully made public.

8.2 Direct-Link and Unlisted Batons

A Baton that is unlisted or accessible by direct link is not necessarily confidential.

Anyone who receives or obtains the link may be able to access the Baton according to the permissions associated with it.

Users should not treat an unlisted or direct-link Baton as a substitute for a feature explicitly described by Batonic as private or access-controlled.

8.3 Nonpublic Information

Information that is not ordinarily public may include:

- payment information; - payout information; - shipping addresses; - private messages; - private Transaction records; - invoices; - wishlists where configured as private; - dispute evidence; - unpublished Batons; - private files; - account-security information; and - other information that Batonic identifies as private or restricted.

Batonic may still access or disclose nonpublic information as described in this Privacy Policy, including when necessary to provide a requested feature, complete a Transaction, prevent abuse, resolve a dispute, or comply with law.

9. When We Disclose Personal Information

Batonic may disclose personal information in the circumstances below.

9.1 Buyers and Sellers

We may disclose information between Buyers and Sellers when reasonably necessary to complete or administer a Transaction.

For example:

- a Seller may receive a Buyer's name, shipping address, delivery instructions, selected options, order details, and Transaction communications; - a Buyer may receive Seller or Storefront information, fulfillment updates, tracking information, service communications, or information needed to exercise Transaction rights; and - both parties may receive records concerning refunds, milestones, disputes, or other Transaction activity.

We do not provide Sellers with a Buyer's full payment-card credentials merely because the Seller made a sale.

9.2 Service Providers and Contractors

We may disclose personal information to vendors and contractors that help us operate Batonic, such as providers of:

- cloud hosting and storage; - content delivery; - payment processing; - fraud detection; - identity verification; - authentication; - email and notifications; - customer support; - analytics; - security; - error monitoring; - mapping and geolocation; - shipping and fulfillment technology; - search; - database infrastructure; and - other technical or operational services.

These providers may process information subject to contractual obligations, their own legal obligations, or both.

9.3 Payment and Financial Providers

We may disclose information to payment processors, banks, financial partners, card networks, or related providers as needed to:

- process payments; - establish seller payout accounts; - verify identity; - prevent fraud; - conduct sanctions or compliance screening; - process refunds; - handle chargebacks; - issue payouts; and - satisfy financial or tax requirements.

Their independent processing is governed by their own privacy notices and legal obligations.

9.4 Shipping, Delivery, and Fulfillment Providers

Information such as names, addresses, contact details, package information, and delivery instructions may be disclosed to shipping carriers, delivery providers, or other fulfillment services where needed to complete a Transaction.

9.5 Professional Advisers

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary for legal, financial, security, risk-management, or business purposes.

9.6 Legal, Safety, and Compliance Disclosures

We may preserve or disclose personal information where we reasonably believe doing so is necessary to:

- comply with applicable law; - respond to valid legal process; - enforce our Terms; - investigate fraud or unlawful activity; - enforce intellectual-property rights; - protect Users or the public; - prevent death, bodily harm, financial loss, or security threats; - address abuse, exploitation, or prohibited content; - respond to a lawful governmental or regulatory request; or - establish, exercise, or defend legal claims.

9.7 Business Transfers

If Stratiline Labs is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, transfer of the Batonic business, or similar transaction, personal information may be disclosed to or transferred as part of evaluating or completing that transaction, subject to applicable law.

9.8 At Your Direction or With Your Consent

We may disclose information when you direct us to do so, request an integration or feature that requires disclosure, or otherwise provide legally valid consent.

10. Selling and Sharing Personal Information

Batonic does not sell personal information for monetary consideration.

Batonic is not a data broker and does not operate a business whose purpose is to sell User profiles or personal information to third parties.

Some privacy laws define "sale," "sharing," or "targeted advertising" more broadly than an exchange of information for money. Certain analytics, advertising, or third-party technology arrangements can potentially fall within those definitions depending on how they are implemented.

If Batonic engages in processing that applicable law treats as a sale, sharing for cross-context behavioral advertising, or targeted advertising, Batonic will provide any notice, opt-out method, consent mechanism, or universal opt-out signal recognition required by applicable law.

At the time of this Policy, Batonic does not intentionally sell personal information or intentionally share personal information with third parties for cross-context behavioral advertising.

11. Cookies and Similar Technologies

Batonic may use cookies, local storage, session storage, pixels, SDKs, and similar technologies to:

- keep Users signed in; - maintain sessions; - remember settings; - provide security features; - prevent fraud; - store preferences; - measure performance; - understand feature use; - diagnose errors; - provide analytics; and - support other Platform functionality.

Cookies may be classified as:

11.1 Strictly Necessary Technologies

These technologies support functions such as authentication, security, session management, checkout, fraud prevention, load balancing, and preferences necessary for requested services.

11.2 Functional Technologies

These technologies remember choices or provide enhanced functionality.

11.3 Analytics Technologies

These technologies help Batonic understand how the Platform performs and how Users interact with it.

Where required by law, Batonic will request consent before using nonessential cookies or similar technologies.

You may be able to control cookies through your browser settings. Blocking certain technologies may cause parts of Batonic to stop functioning correctly.

12. Global Privacy Control and Browser Signals

Some browsers and extensions can transmit privacy preference signals, including the Global Privacy Control ("GPC").

Where applicable law requires Batonic to treat a recognized signal as a request to opt out of sale, sharing, or targeted advertising, Batonic will honor that signal in the manner required by law for the browser or device sending it.

Because there is no universally accepted standard requiring websites to respond to every "Do Not Track" signal, Batonic may not respond to browser signals other than those it is legally required or expressly designed to recognize.

13. Analytics

Batonic may use first-party or third-party analytics services to understand Platform usage, performance, reliability, conversion, feature adoption, and user experience.

Analytics information may include device information, IP-derived approximate location, pages or features viewed, referral information, interaction events, session data, and performance information.

Where required by law, Batonic will provide applicable consent or opt-out controls for analytics technologies.

14. Deidentified and Aggregated Information

Batonic may create and use aggregated or deidentified information for:

- analytics; - security; - fraud prevention; - product development; - research; - business planning; - performance measurement; and - other lawful purposes.

Where information is maintained as deidentified information under applicable law, Batonic will not attempt to reidentify it except as permitted by law, such as to test whether deidentification measures are effective.

15. Data Retention

Batonic retains personal information for no longer than reasonably necessary for the purposes described in this Privacy Policy, subject to legal, security, accounting, dispute, fraud-prevention, and operational requirements.

Retention depends on the type of information and why it was collected.

15.1 Account and Profile Information

Account and profile information may generally be retained while the Account remains active and for a reasonable period afterward where necessary for account recovery, fraud prevention, enforcement, legal compliance, or recordkeeping. Where a User is under 18, records of parental or guardian consent, verification, or responsibility may also be retained for as long as reasonably necessary to demonstrate authorization, administer the Account, resolve Transactions or disputes, and comply with law.

15.2 Storefront and Seller Information

Storefront, seller, payout, and compliance records may be retained for as long as the Storefront is active and afterward where necessary to comply with financial, tax, fraud-prevention, legal, and Transaction-record obligations.

15.3 Transaction Records

Batonic may retain purchase, sale, invoice, refund, payout, dispute, fulfillment, and Transaction snapshot records for periods reasonably necessary to:

- provide purchase history; - preserve licenses or proof of purchase; - respond to disputes or chargebacks; - satisfy tax and accounting obligations; - prevent fraud; - comply with legal requirements; and - establish or defend legal claims.

Deletion of an Account does not necessarily require deletion of records that Batonic must or may lawfully retain for these purposes.

15.4 User Content

User Content may be retained until deleted by the User, removed by Batonic, expiration of an applicable content-lifetime setting, Account closure, or another event applicable to the feature.

Copies of content may remain temporarily in backups, caches, content-delivery systems, or disaster-recovery systems after deletion from active systems.

Content associated with a completed Transaction may be retained where reasonably necessary to preserve the Buyer's purchased access, Transaction evidence, licensing records, dispute evidence, or other legitimate Transaction purposes.

15.5 Messages

Messages may be retained while relevant Accounts or Transactions remain active and afterward where reasonably necessary for support, fraud prevention, abuse investigations, dispute resolution, legal compliance, or enforcement.

15.6 Security and Technical Logs

Security, diagnostic, and technical logs are generally retained for periods appropriate to their operational, security, and fraud-prevention purpose and may be retained longer if associated with an investigation or legal requirement.

15.7 Backups and Legal Holds

Deleted information may remain in backups for a limited period before being overwritten in the ordinary course.

Information subject to a legal hold, active dispute, fraud investigation, regulatory requirement, or preservation obligation may be retained until the applicable matter is resolved or the retention obligation ends.

16. Security

Batonic uses administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

Depending on the information and system involved, these measures may include:

- authentication and authorization controls; - encryption in transit; - encryption at rest where appropriate; - access restrictions; - logging and monitoring; - rate limiting; - fraud detection; - secure development practices; - vulnerability management; - backup and recovery controls; - vendor review; and - incident-response procedures.

No system, transmission method, or storage environment can be guaranteed to be completely secure. Users are responsible for protecting their credentials and promptly reporting suspected compromise.

If Batonic becomes aware of a security incident involving personal information, Batonic will investigate and provide legally required notices where applicable.

17. Your Privacy Choices

Depending on the feature, you may be able to:

- edit Account information; - edit Storefront information; - choose what profile fields are public; - change notification preferences; - control device-location permissions; - manage cookies through browser controls; - unsubscribe from promotional email; - delete or unpublish eligible User Content; - close your Account; - block or report other Users; - control certain discovery or social settings; and - submit a privacy-rights request.

Some settings may not apply to information Batonic must retain for Transactions, compliance, security, fraud prevention, legal obligations, or other permitted purposes.

18. Account Deletion

Users may request or initiate Account deletion through available Platform controls or by contacting support@batonic.app.

Account deletion may result in loss of access to:

- purchased or saved content; - Storefront controls; - messages; - wishlists; - account history; - seller tools; and - other Account-linked functionality.

Before completing deletion, Batonic may require resolution of:

- pending Transactions; - open disputes; - payout issues; - negative balances; - fraud or security investigations; - legal holds; or - other obligations that cannot reasonably be resolved after deletion.

Deletion does not require Batonic to erase information that we are legally required or permitted to retain, including Transaction, tax, accounting, fraud-prevention, dispute, security, enforcement, and legal records.

Where feasible, information no longer needed may be deleted, anonymized, or deidentified.

19. Privacy Rights Under U.S. State Law

Depending on where you live and whether a particular law applies to Batonic or to the information at issue, you may have some or all of the following rights:

- Right to know or access: request information about personal information Batonic collects, uses, or discloses; - Right to obtain a copy: receive a copy of certain personal information; - Right to correction: request correction of inaccurate personal information; - Right to deletion: request deletion of certain personal information; - Right to portability: receive certain information in a portable format; - Right to opt out of sale: opt out of qualifying sales of personal information; - Right to opt out of sharing or targeted advertising: opt out of qualifying cross-context behavioral advertising or targeted advertising; - Right to limit certain uses of sensitive personal information: where provided by law; - Right to withdraw consent: where processing is based on consent and applicable law provides that right; - Right to opt out of certain profiling or automated decisions: where provided by law; - Right to appeal: appeal certain denied privacy requests in states that provide an appeal right; and - Right to non-discrimination: exercise applicable privacy rights without unlawful discrimination.

These rights are not absolute. Applicable law may permit or require Batonic to deny a request in whole or in part, including where information is necessary to complete a Transaction, detect fraud, maintain security, comply with law, exercise legal rights, or fulfill another recognized exception.

20. How to Exercise Privacy Rights

Privacy requests may be submitted to:

support@batonic.app

Please identify the request as a privacy request and describe the right you wish to exercise.

Batonic may need to verify your identity before fulfilling a request. Verification may require information reasonably matched to existing Account or Transaction records.

Batonic will not request more information than reasonably necessary for verification.

If Batonic cannot verify a request to the degree required by applicable law, we may be unable to fulfill some or all of it.

Where applicable law permits an authorized agent to submit a request on your behalf, Batonic may request evidence of the agent's authority and may separately verify your identity or confirm that you authorized the request.

For a User who is 13 through 17, Batonic may accept or require a request from the User's parent or legal guardian where appropriate or required by law. We may verify the requesting adult's identity, guardianship, or authority before disclosing, changing, or deleting the teen User's information.

Batonic will respond within the period required by applicable law and may extend that period where the law permits and the circumstances require additional time.

21. Appeals

If Batonic denies a privacy request and applicable law gives you a right to appeal, you may appeal by emailing support@batonic.app and stating that you are appealing a privacy-rights decision.

Include enough information to identify the original request.

Batonic will review qualifying appeals and respond as required by applicable law.

22. California Privacy Notice

This section supplements the rest of this Privacy Policy for California residents.

If the California Consumer Privacy Act, as amended ("CCPA"), applies to Stratiline Labs and the personal information at issue, California residents may have rights including access, correction, deletion, opt-out of qualifying sale or sharing, limitation of certain uses of sensitive personal information, and non-discrimination.

22.1 Categories of Personal Information

Depending on how a person uses Batonic, we may collect the following categories of personal information recognized by California law:

| Category | Examples in Batonic | Typical Sources | Typical Purposes | | --- | --- | --- | --- | | Identifiers | Name, email, username, IP address, Account identifiers, processor identifiers | You, your device, authentication providers, payment providers | Accounts, authentication, Transactions, support, security | | Customer-record information | Contact information, billing or fulfillment information, business information | You, payment or fulfillment providers | Transactions, fulfillment, compliance | | Commercial information | Purchases, sales, refunds, subscriptions, wishlists, Transaction history | You, Buyers, Sellers, payment providers | Transactions, records, recommendations, support | | Internet or electronic-network activity | Device information, logs, pages viewed, interactions, API activity | Browsers, devices, Platform systems | Security, analytics, performance, fraud prevention | | Geolocation information | IP-derived approximate location, delivery/service locations, precise location when expressly enabled | You, device permissions, network information | Local features, fulfillment, security | | Audio, electronic, visual, or similar information | Images, videos, audio, screenshots, uploaded content | You and other Users | Baton content, support, disputes, Platform features | | Professional or business information | Storefront or business information, Seller-related information | You, payment/compliance providers | Seller features, Transactions, compliance | | Inferences | Fraud-risk indicators, recommendations, preferences inferred from activity | Platform activity and systems | Security, personalization, discovery | | Sensitive personal information | Credentials, precise geolocation when enabled, financial-account or verification information where applicable | You, devices, payment/verification providers | Authentication, payments, compliance, fraud prevention, requested location features |

Batonic does not necessarily collect every example or category from every User.

22.2 Sources of California Personal Information

We may collect California personal information from:

- you; - your device or browser; - other Users; - payment processors; - identity or compliance providers; - authentication providers; - shipping or delivery providers; - security and fraud-prevention services; - analytics providers; - public sources where lawful; and - other vendors or service providers supporting Batonic.

22.3 Business and Commercial Purposes

We may use California personal information for the purposes described throughout this Privacy Policy, including:

- providing the Platform; - authenticating Accounts; - processing Transactions; - administering payouts; - delivering digital content; - shipping and fulfillment; - providing messages and support; - resolving disputes; - protecting security; - preventing fraud and abuse; - debugging and maintaining the Platform; - analytics and product improvement; - compliance with law; - internal administration; and - other purposes disclosed when information is collected.

22.4 Categories of Recipients

We may disclose California personal information to categories of recipients including:

- Buyers or Sellers where needed for a Transaction; - payment and financial providers; - cloud and infrastructure providers; - authentication providers; - security and fraud-prevention providers; - shipping, delivery, or fulfillment providers; - analytics providers; - support and communications vendors; - mapping or location providers; - professional advisers; - governmental or legal authorities where appropriate; and - parties to a qualifying business transaction.

The categories disclosed depend on the feature and the information necessary to provide it.

22.5 Sale and Sharing

Batonic does not sell personal information for monetary consideration.

At the time of this Policy, Batonic does not intentionally sell personal information as a business model and does not intentionally share personal information for cross-context behavioral advertising.

If Batonic later engages in processing that constitutes "sale" or "sharing" under the CCPA, we will update our disclosures and provide the legally required opt-out or consent mechanisms.

Where California law requires affirmative authorization before the sale or sharing of personal information relating to a consumer under 16, Batonic will not knowingly engage in that sale or sharing without the authorization required by law. For Users ages 13 through 15, that may require affirmative authorization from the User; for children under 13, parental or guardian authorization may be required. Batonic does not permit children under 13 to create Accounts.

Where legally required, Batonic will recognize a valid opt-out preference signal, such as Global Privacy Control, for the browser or device sending that signal.

22.6 Sensitive Personal Information

Batonic uses sensitive personal information for purposes reasonably necessary to provide requested services, authenticate Users, process payments and payouts, prevent fraud, fulfill Transactions, secure the Platform, comply with law, and provide location-based functionality requested by the User.

If Batonic uses sensitive personal information for purposes that trigger a California right to limit, Batonic will provide the required method to exercise that right.

22.7 California Rights

Subject to applicable exceptions and verification requirements, qualifying California residents may request:

- the categories of personal information collected; - specific pieces of personal information; - categories of sources; - purposes for collection, use, sale, or sharing; - categories of third parties to whom information is disclosed; - correction of inaccurate information; - deletion of qualifying information; - opt-out of qualifying sale or sharing; - limitation of qualifying uses or disclosures of sensitive personal information; and - equal service and pricing without unlawful discrimination for exercising CCPA rights.

Requests may be sent to support@batonic.app.

23. Privacy Rights in Other U.S. States

Residents of states with comprehensive consumer privacy laws may have rights in addition to or different from those described in the California section.

Depending on the applicable law, these may include rights to:

- confirm whether Batonic processes your personal information; - access personal information; - correct inaccuracies; - delete certain information; - obtain a portable copy; - opt out of targeted advertising; - opt out of sale; - opt out of certain profiling; - withdraw consent for certain sensitive-data processing; - obtain a list of certain third parties to which personal data was disclosed where required; - appeal a denied request; and - avoid unlawful discrimination for exercising privacy rights.

Batonic will apply the rights and exceptions required by the law applicable to the request.

A state privacy law may not apply to Stratiline Labs, a particular User, or a particular category of information because of statutory thresholds, exemptions, or other limitations. Nothing in this Privacy Policy is intended to waive an exemption available under applicable law.

Even where a statutory privacy right does not apply, Batonic may choose to honor a reasonable request as a matter of customer service when doing so is technically feasible and does not conflict with security, legal, fraud-prevention, Transaction, or other legitimate requirements.

24. Financial Information and Payment Providers

Batonic's Transaction infrastructure may depend on payment providers that independently collect and process personal information.

When you provide card, bank, tax, or identity information directly in a payment provider's interface, that provider's privacy policy governs its independent processing.

Batonic may receive limited information necessary to know whether:

- a payment succeeded or failed; - a payment method is available; - a Seller is verified; - a connected payout account is eligible; - a payout was initiated or completed; - a refund was processed; - a chargeback was filed; or - additional action is required.

Batonic may also maintain records necessary to reconcile Transactions, investigate fraud, provide support, and comply with financial or legal obligations.

Users should not send complete payment-card numbers, passwords, bank-login credentials, or other unnecessary financial secrets through Batonic messages or support communications.

25. Identity Verification and Compliance Providers

Certain Seller, payout, fraud-prevention, or high-risk activities may require identity, business, or compliance verification.

Batonic or an applicable third-party provider may request information such as:

- legal name; - date of birth; - address; - business information; - tax information; - government-issued identification; or - additional documentation necessary to verify identity or authority.

Where verification is performed by a third party, Batonic may receive confirmation, status, risk, or account information without receiving every underlying identity document.

Verification information may be retained as necessary to satisfy legal, fraud-prevention, security, and compliance requirements.

26. Biometric Information

Batonic does not intentionally collect biometric identifiers for the purpose of identifying or recognizing Users unless a feature expressly discloses that processing and Batonic has implemented any consent or notice required by applicable law.

Independent identity, payment, or device-security providers may offer biometric verification under their own privacy policies.

Batonic does not obtain ownership of biometric information processed by an independent provider merely because the provider is used in connection with Batonic.

27. External Links and Third-Party Content

Users may encounter links to third-party websites or services through Batonic.

When you leave Batonic, the destination's privacy practices apply.

Batonic is not responsible for the privacy, security, content, or data practices of third-party websites merely because another User linked to them or Batonic allowed the link to be opened.

Users should review the privacy policies of third-party services before providing personal information to them.

28. Integrations and Connected Services

If you choose to connect Batonic to another service, Batonic may receive information that you authorize the service to provide and may send information necessary to perform the requested integration.

You can stop future information exchange by disconnecting the integration where Batonic provides that control, although information already received may remain subject to Batonic's ordinary retention rules.

A third party may retain information previously provided to it under its own privacy policy.

29. User Responsibility for Personal Information in Content

Batonic allows Users to create and upload content.

Do not upload another person's:

- home address; - private contact information; - government identifier; - financial information; - medical information; - credentials; - private communications; - intimate content; or - other sensitive personal information

unless you have a lawful reason and any permission required to do so.

A User who publishes personal information in a public Baton, profile, review, description, file, or message bears responsibility for the information that User chooses to submit, subject to Batonic's own obligations under applicable law.

Batonic may remove, restrict, or preserve content containing personal information where necessary to enforce Platform rules, protect individuals, respond to a valid privacy or safety request, or comply with law.

30. Reports, Safety Requests, and Unlawful Disclosure of Personal Information

Users may report content or conduct that improperly discloses personal information, facilitates identity theft, constitutes harassment, involves non-consensual intimate material, or otherwise violates Batonic's policies or applicable law.

Reports may be sent through available Platform controls or to support@batonic.app.

Batonic may request information necessary to verify a report, identify the content, assess applicable law, prevent abuse of the reporting process, and take appropriate action.

Batonic may retain records concerning a report and its resolution where reasonably necessary for safety, compliance, repeat-abuse prevention, evidence preservation, or legal purposes.

31. Legal Requests and Law Enforcement

Batonic may receive subpoenas, warrants, court orders, preservation demands, regulatory requests, or other legal process.

We evaluate requests according to applicable law and may disclose information when legally required or when disclosure is otherwise permitted for safety, fraud prevention, or protection of legal rights.

Batonic may preserve information in response to a valid preservation request or where reasonably necessary to protect legal rights.

Where legally permitted, Batonic may challenge requests we believe are invalid, overbroad, or inappropriate, but we are not obligated to do so on behalf of a User.

32. International Users and Data Transfers

Batonic is operated from the United States, and information may be processed and stored in the United States and other locations where Batonic's service providers operate.

If you access Batonic from outside the United States, your information may be transferred to a jurisdiction whose privacy laws differ from those of your location.

Where applicable law requires a particular safeguard for an international transfer of personal information, Batonic will use a legally recognized mechanism where required.

Use of Batonic from a jurisdiction where the Platform or a Transaction is unlawful is prohibited by the Terms of Service.

33. Business and Organizational Accounts

If you use Batonic through a business, organization, employer, or other entity, that entity may control a Storefront, manage seats or permissions, or otherwise have access to activity performed within the scope of its authorized environment.

Users should understand the permissions granted to Storefront owners and administrators before using an organizational Account or Storefront.

Batonic may provide the Storefront owner or authorized administrator with information reasonably necessary to manage access, permissions, security, Transactions, and the Storefront.

34. Changes to This Privacy Policy

Batonic may update this Privacy Policy to reflect:

- changes to the Platform; - changes in information practices; - new features; - changes in service providers; - legal or regulatory requirements; - security practices; or - other operational changes.

When we update this Privacy Policy, we will update the "Last Updated" date.

If a change materially alters how we process personal information and applicable law requires additional notice or consent, Batonic will provide that notice or obtain consent as required.

Continued use of Batonic after an updated Privacy Policy becomes effective does not constitute consent to processing where applicable law requires a different form of consent.

35. Relationship to the Terms of Service

This Privacy Policy describes how Batonic processes personal information.

The Batonic Terms of Service govern contractual rights and obligations relating to use of the Platform.

If a provision of this Privacy Policy conflicts with a mandatory requirement of applicable privacy law, the legal requirement controls to the extent of the conflict.

Nothing in this Privacy Policy creates a contractual right to deletion, access, retention, security, service availability, or another remedy beyond rights expressly provided by applicable law or the Terms of Service.

36. Contact Us

For privacy questions, privacy-rights requests, security concerns involving personal information, or questions about this Privacy Policy, contact:

support@batonic.app

To help us route a request efficiently, you may use a subject such as "Privacy Request", "Privacy Question", or "Data Security Concern."

---

37. Summary of Batonic's Privacy Approach

Batonic's privacy practices are built around the following principles:

1. Users own their User Content. Batonic processes it to operate the Platform but does not claim ownership merely because it is uploaded. 2. Transaction data is used to complete and protect Transactions. This includes payment status, fulfillment information, inspection records, refunds, and dispute evidence. 3. Public information is intentionally public; private information is handled according to the feature and this Policy. 4. Batonic does not sell personal information for money. 5. Sensitive information is used for specific operational, security, Transaction, fulfillment, and compliance purposes rather than unrelated profiling. 6. Batonic may use automated and manual systems to fight fraud, prohibited content, abuse, malware, and security threats. 7. Users may exercise privacy rights provided by applicable law. 8. Batonic retains information according to legitimate operational, Transaction, safety, legal, and compliance needs rather than indefinitely without purpose. 9. Batonic uses reasonable security measures but cannot guarantee absolute security. 10. Privacy and support requests can be sent to support@batonic.app.