Atelier Studio Privacy Policy

Who We Are

Atelier Studio^™ is a software platform operated by LB Digital Ventures Inc., a Delaware corporation. If you have questions about privacy or data protection, contact us at [email protected].

Our Role vs. Studio Role

Atelier Studio^™ operates as a platform provider, not a class provider.

Studios are the owners and controllers of their end-customer data.
Atelier Studio^™ acts as a data processor, storing and processing data on a studio's behalf.
End customers contract directly with studios, not with Atelier Studio^™.
Studios are responsible for obtaining any required consents (including parental consent) and for the accuracy and legality of the data they upload.

Information We Collect

A. Account & Studio Information

We collect information necessary to operate the platform, including:

Names
Email addresses
Phone numbers
Business names
Studio addresses
Optional profile photos
Roles and permissions

B. End-Customer Information (Provided by Studios)

Studios may store the following end-customer data in Atelier Studio^™:

Names
Email addresses
Phone numbers
Dates of birth
Emergency contact details
Attendance records
Internal notes and comments

Some studios may choose to store optional sensitive information, such as medical notes or allergies. This information is stored at the direction of the studio. Data related to minors may be stored when studios enroll children in classes. This data is encrypted at rest and is protected with database security measures that lock such data to only be visible to that studio.

Payments

Atelier Studio^™ does not store full payment credentials.

Payments are processed exclusively through Stripe
We store only Stripe tokens, payment method brand, and last four digits
Studios are the merchant of record
Atelier Studio^™ facilitates subscriptions, one-time payments, refunds, and chargeback workflows

How We Use Information

We use data to:

Provide and operate the platform
Authenticate users and manage access
Process payments and subscriptions
Provide customer support
Monitor system performance and security
Improve the product through analytics

We do not sell personal data.

Analytics, Logging, and Cookies

We use the following tools:

PostHog for product analytics
Sentry and AWS CloudWatch for error monitoring and logging
Firebase Authentication cookies and local storage for authentication and session management

Our marketing website operates under a separate privacy policy.

Communications

Transactional emails are sent via Postmark
Transactional SMS, MMS, RCS, and WhatsApp messages are sent via Sent.dm
Marketing communications are email-only, opt-in only, and are sent via Postmark
Users may opt out of marketing at any time
Transactional communications are required for platform operation

Text Messaging (SMS)

Studios may enable text messaging (SMS, RCS, or WhatsApp) to reach their customers about bookings and account activity. Text messaging is opt-in only, and consent to receive text messages is never a condition of creating an account, booking a class, or making a purchase.

When a customer opts in during a studio's booking flow, they are shown this notice:

“By checking this box you agree to receive text messages regarding bookings from this studio. Message frequency varies. You can set your preferences in your account at any time. Message and data rates may apply. Reply STOP to opt-out or HELP for help.”

Message frequency varies. Message and data rates may apply. You can reply STOP at any time to unsubscribe, or HELP for help, and you can manage your messaging preferences in your account.

We do not share or sell mobile phone numbers or text-messaging opt-in information to third parties or affiliates for their own marketing purposes. This information is used only to deliver the messages you have opted into.

Infrastructure & Subprocessors

We use trusted third-party providers, including:

AWS (hosting, database, file storage)
Google Cloud Platform (analytics data storage)
Stripe (payments)
Postmark (email)
Sent.dm (SMS, RCS, and WhatsApp messages)
Loops (opt-in email marketing and product updates)

AI and Automated Processing

Atelier Studio^™ does not currently use AI to process user-generated content. In the future:

AI may be used to provide customer support via a chatbot
AI may analyze anonymized, aggregate data for analytics
AI responses may be inaccurate and are not professional advice
Users will always have the option to contact a human or submit a support ticket

Data Retention

Account and platform data is retained while an account is active
Upon suspension or termination, data is retained for 90 days
Studio owners may export data during this period
After 90 days, data is anonymized and retained for analytics purposes
Operational backups may be retained in cold storage for up to five years and are not actively accessible

Individuals that wish to delete their Atelier account can do so at any time. Data will be fully anonymized after 7 days. The process is irreversible, but can be canceled by the user before the 7-day timer expires. Anonymized data is retained so studio reporting and analytics remain accurate, but cannot be linked back to a real person.

Security

We use reasonable administrative, technical, and physical safeguards to protect data, including encryption at rest and in transit. No system is 100% secure, but we work hard to protect your data.

Your Rights

Depending on your location, you may have rights to access, correct, or delete personal data. Requests should be directed to the studio that controls the data or to [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users by email or within the platform. Continued use constitutes acceptance.