Legal

Privacy Policy

Last updated: 30.09.2026

This Privacy Policy explains what information ATELLIER collects, how we use it, and the rights you have over your data.

What We Collect

We collect the information you provide when you register — your name, email, and payment details (the card details you enter at checkout are passed to our payment processor to take the payment; we do not store your full card number) — along with the photos you upload, the briefs and brand kits you create, and the ads we generate for you. We also collect standard technical data such as IP address, browser and device, to operate and secure the platform, plus any messages you send us through the contact form.

How We Use Your Information

We use your information to run ATELLIER: to generate your ads, process payments, answer your messages, and prevent fraud and abuse. We email you only about your account — a welcome email, payment receipts, password resets and replies to your messages. We do not send marketing emails. Our legal bases under the GDPR are performance of our contract with you, our legitimate interest in keeping the service secure and free of abuse, and compliance with our legal obligations.

Sign-up Checks

When you create an account we check the country of your IP address and your email domain against the countries we do not serve (listed in our Terms of Service), and we run automated checks to stop abusive sign-ups — for example disposable email addresses, anonymising networks, and too many new accounts from one IP address or email domain. A refused sign-up is reported to our team with its IP address, country, browser and a masked email address, so we can check the refusal was right. These checks run only at sign-up; signing in is never blocked by country.

Who We Share It With

We do not sell your data. We share it only with the service providers that run ATELLIER for us, as processors under contract, and only what each needs: hosting and database, file storage for your photos and ads, card payment processing, email delivery, the AI model providers that write the ad copy and render the images (they receive your product photo, brief and brand details to do so), and the messaging service that delivers contact-form messages to our team. We do not use your content to train AI models. Where the law requires us to disclose information we will comply, and we will challenge requests where we can.

Cookies

We use only the cookies ATELLIER needs: sign-in and security cookies, a record that you have seen the cookie notice, and your currency choice. We use no analytics, advertising or tracking cookies. Our Cookie Policy lists each cookie with its purpose and lifetime.

Your Rights

You can export a copy of your data or permanently delete your account at any time, instantly, from your account settings while signed in. For correction, restriction, or objection to processing that isn’t covered by self-service, write to us through our contact form. We respond within 30 days, in line with the GDPR, and we will never penalize you for exercising your rights.

Data Retention

We keep your information for as long as your account is active or as the law requires. Generated ads and uploaded photos are retained while your account is open; after closure, your data is deleted or anonymized within 90 days, except where we must keep records to meet our legal and accounting obligations.

International Transfers

ATELLIER operates globally, so your data may be processed in other countries, including the US, EU, and UK. When we transfer data across borders, we use approved safeguards such as Standard Contractual Clauses to keep it protected. EEA/UK residents may lodge a complaint with their local Data Protection Authority.

Contact & Changes

We may update this policy from time to time; we’ll post the new version here with a revised date and, for material changes, notify you. Continued use after an update constitutes acceptance. Scaleon Digital Ltd (Company No. 17201919), registered in England and Wales at Dept 6763, 196 High Road, Wood Green, London, United Kingdom, N22 8HH, operates ATELLIER and is the data controller for the personal data described in this policy. Privacy questions or data requests: write to us through our contact form.