1. Who this policy applies to
Atelier Book provides the Atelier Book scheduling platform. This policy applies to account holders, workspace members, website visitors and people who submit information through a booking page.
Businesses using Atelier Book may independently decide why and how customer booking information is used. In those situations, the business is responsible for its own privacy notices and legal obligations, while the platform processes information on its behalf.
2. Information we collect
- Account information, including name, email address, authentication details and profile preferences.
- Business information, including business name, contact details, location, services, staff, availability and branding settings.
- Booking information, including customer contact details, appointment times, selected services, notes and booking status.
- Billing information, including subscription status, transaction identifiers and invoice references. Full payment-card details are processed by Paddle and are not stored by Atelier Book.
- Technical and security information, including device, browser, IP address, timestamps, authentication activity and diagnostic logs.
- Communications and support information submitted when requesting assistance or responding to service messages.
3. How information is used
- Provide, operate and improve the scheduling platform.
- Authenticate users and protect accounts and workspaces.
- Create, update and manage bookings and availability.
- Process subscriptions and maintain billing records.
- Send service, security and booking-related communications.
- Detect abuse, investigate incidents and enforce platform terms.
- Comply with legal, tax, accounting and regulatory obligations.
4. Legal grounds
Where applicable law requires a legal basis, information is processed to perform a contract, follow legal obligations, protect legitimate business and security interests, or act with consent. Consent may be withdrawn where processing depends on consent.
5. How information is shared
Information may be shared with the relevant business workspace, authorized team members and service providers needed to operate the platform. Current infrastructure providers include Supabase for database and authentication services, Cloudflare for hosting and network services, and Paddle for checkout, billing and subscription management.
Information may also be disclosed when required by law, to protect users or the platform, during a corporate transaction, or with explicit authorization. Personal information is not sold for money.
6. International processing
Infrastructure and service providers may process information in countries other than the user's country. Appropriate contractual, organizational or legal safeguards are used where required.
7. Data retention
Information is retained only as long as reasonably necessary to provide the service, maintain security and business records, resolve disputes and meet legal obligations. Workspace operators may have separate retention requirements for their customer records.
8. Security
Atelier Book uses access controls, encrypted connections, authentication safeguards and database-level isolation measures. No internet service can guarantee absolute security, so users should protect their credentials and report suspected unauthorized access.
9. Privacy rights
Depending on location, individuals may have rights to access, correct, delete, restrict or receive a copy of their information, or object to certain processing. Booking customers should normally contact the business that collected their information first.
10. Children
Platform accounts are not intended for children. Businesses that accept bookings involving minors are responsible for obtaining any consent required by law and configuring their data collection appropriately.
11. Updates to this policy
This policy may be updated when the service, providers or legal requirements change. The effective date shown at the top identifies the latest published version.
Contact
The production operator will publish its official support contact before accepting live customers.