Privacy Policy

Atelier is run by Greenwood Studios LLC, based in Massachusetts, United States, which is responsible for the personal data described here (the “controller”, in European terms). Write to [email protected] about anything on this page.

Browsing the galleries and searching the catalogue needs no account and records nothing that identifies you. Your IP address is used briefly to limit repeated sign-in attempts and then discarded.

• Your email address — to sign you in, by a link sent to it, and to send you receipts and notices about your subscription. Beyond that we write only if we need to about your account or an order: no newsletters, no offers.
• What you bought and when — your credits, orders and the photographs you hold a license for, with the license version you bought under. This is what lets you download them again, for good.
• Your subscription status, as reported by Stripe.
• Which assistants you have connected, so you can see and revoke them.
• Any API keys you make, stored only as one-way hashes, with when each was last used.

Card details go directly to Stripe on its own checkout page. We receive a customer reference, your billing address — which decides the sales tax or VAT due — and whether the payment succeeded. Never the card number.

A photographer may ask for your email address before you download from a gallery they made for you. It is given to that photographer, for them to know who downloaded their work, and is not used by Atelier for anything else.

Your account details, your galleries and the photographs you upload. Photographs in a gallery you put up for sale are analysed automatically — for colour, shape and subject — to write the captions and keywords that make them findable. The analysis is of the pictures, not of anyone who looks at them.

If you apply to join, we keep what you send on the waitlist form — your name, email, and the links and details you choose to give — to consider your application and to reply to you. Ask us and we delete it.

• To perform our contract with you — your account, your purchases, and delivering and re-delivering what you bought.
• To meet a legal obligation — working out the tax due on a sale, and keeping records of payments for tax and accounting.
• Our legitimate interest in keeping the service secure and the free trial fair — the brief use of IP addresses to limit sign-in emails and attempts, and a one-way fingerprint of your email address so the trial is given once per person.

Only the ones that make the site work: one that keeps you signed in, and ones that remember you have entered a gallery’s access code or given your email for a download, so you are not asked twice. Your light or dark preference is kept in your own browser. There are no tracking or advertising cookies, so there is nothing to consent to.

• Cloudflare hosts the site, stores the data and photographs, and runs the image analysis.
• Stripe takes payments.
• Resend delivers sign-in emails, receipts and notices about your subscription.

Each handles only what it needs to do that job, under its own data-processing terms. Nothing is sold, or shared for advertising or marketing.

Your data is stored and processed in the United States, and on Cloudflare’s network wherever a request is served from. If you are in the European Union, the United Kingdom or Switzerland, transfers to the United States rely on the safeguards these providers offer for it, such as the Data Privacy Framework and the European Commission’s standard contractual clauses.

• Your account and what you bought — for as long as the account exists, since that is what lets you download your images again. They are deleted with it.
• Records of payments — in our Stripe account, for as long as tax law requires (typically seven years), including after your account is deleted.
• An address that never signs in — no account is made for it. It is kept only with its sign-in link, which expires after fifteen minutes and is deleted a day later. A session ends after thirty days.
• A revoked API key — deleted after thirty days.
• A record of each email we send you — the address, the subject, when and whether it arrived — deleted after ninety days, or with your account.
• If you took the free trial — a keyed, one-way fingerprint of your email address, kept for two years even after your account is deleted, so the trial is not given twice. It cannot be turned back into your address.

Your account page lets you download everything we hold about you, disconnect an assistant, cancel a subscription and delete your account yourself; your assistant can give you its address. You can also ask us for a copy of what we hold, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form, and we answer within thirty days. Records of past payments are kept after an account is closed, as tax law requires, and used for nothing else.

If you are in the European Union or the United Kingdom you may also complain to your data-protection authority. We do not sell or share personal information as any US state privacy law defines those words, and would not treat you differently for exercising a right.

Atelier is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us some, write to us and we will delete it.

Sign-in tokens are stored only as one-way hashes, connections are encrypted, and access to the data is limited to us. If this policy changes, the date at the top changes with it, and a change that matters to buyers is announced before it takes effect.