Your shop’s records
belong to your shop.

1. Who is responsible

Atelier is provided by Anjali Design Studio, GF-1, Ground Floor, Phoenix Lifestyle, New Fatehpura, Girwa, Udaipur, Rajasthan 313001, India. That is the business responsible for the information described below, and the one to write to about any of it.

2. Two different kinds of information

It helps to separate them, because our role is different for each.

• Your account information · the shop’s name, the owner’s name, email address and phone number, staff names and logins, and the record of your subscription. We decide what is needed here, so we are responsible for it.
• Your shop’s business records · your stock, prices, photographs, sales, purchases, ledgers, and the details of your own customers and karigars. You decide what goes in and why. We only hold and process it on your instructions, as your service provider. If one of your customers asks about their details, the answer comes from you, and we will help you give it.

3. What we collect

Given by you

• Shop name and address, owner’s name, email address, telephone number.
• Staff names and usernames, and what each is permitted to do.
• Everything you enter as business records, including photographs of pieces, and any personal details of your own customers you choose to record — typically name, telephone number, and where you record them, address and PAN.

Created by using the app

• An audit log of significant actions — who logged in, who recorded or changed a sale, who approved a deletion. It exists so an owner can see what happened in the shop, it cannot be edited by staff, and we do not use it for anything else.
• Basic technical information any web service receives, such as the request your browser makes and its approximate origin, used to keep the service running and secure.

Payments

• Whether your subscription is paid, until when, and the reference numbers of the mandate and its charges.
• We never see or store your card number, expiry date or CVV. Those go directly to our payment processor and never reach us.

4. Why we hold it

• To provide Atelier to you — the core reason for almost everything above.
• To take payment and keep the required financial records.
• To support you when you contact us, which sometimes means looking at your account to understand a problem you have described.
• To keep the service secure, and to investigate misuse.
• To comply with Indian law where it requires us to keep or produce records.

We do not use your data to train anything, and we do not use it to build products for anyone else.

5. Where it is stored, and who else handles it

Atelier is built on services provided by others. These are all of them, what each does, and where it holds data.

• Google (Firebase) · the database holding your business records, and the login system. Your data is stored in Google’s asia-southeast1 region (Singapore).
• Cloudinary · stores the photographs of your pieces and any documents you upload, such as a scanned certificate.
• Cloudflare · serves the app and this website to your browser.
• Cashfree Payments · takes the subscription payment and holds the card or bank mandate. An Indian payment processor, regulated in India.

Some of your data is therefore stored outside India, principally in Singapore. We chose that region because it is the nearest one with the response times the app needs. If you would rather your data did not leave India, tell us before you sign up so you can make an informed decision.

Optional AI features run on your own key

Several optional features — reading a packing list or a vendor invoice from a photograph, reading a diamond certificate, writing a description of a piece — use Google’s Gemini service. These work on an account key you obtain yourself and enter on your own device. The image is sent from your browser directly to Google. We never see that key and never hold those images. Using these features is entirely your choice, and what Google does with what you send is governed by your agreement with Google.

6. Cookies and what is kept on your device

Atelier sets no advertising or tracking cookies, and there are no analytics scripts on this website.

The app stores a small amount of information in your browser so it can work: your login session so you are not signed out constantly, and a few display preferences. It is on your device, not ours, and clearing your browser data removes it.

This website loads its typefaces from Google Fonts. That means your browser makes a request to Google in order to fetch them.

7. Who we share it with

We do not sell your data, and we do not share it with other shops.

It reaches only:

• the service providers listed in section 4, each doing the job described there;
• professional advisers such as our accountant, where necessary;
• a public authority, where the law requires it of us.

Our own staff can reach your account only to support you or to fix a fault, and are bound to keep what they see confidential.

8. How long we keep it

• While you are a customer · for as long as your account is open.
• After you cancel · your data stays in place so you can still log in and download it. It is not deleted automatically, and nothing is deleted as a punishment for not paying.
• When you ask us to delete it · we delete it within 30 days, except anything we must keep for tax or legal reasons, which is kept only for as long as required.
• Records of payments are kept for the period Indian financial law requires.

9. Your rights

• Get a copy. You can export everything yourself from inside the app, at any time, including after cancelling. Ask us and we will do it for you.
• Correct it. Almost everything is editable in the app; write to us for anything that is not.
• Delete it. Write to customer care and we will delete your account and its data within 30 days, and confirm when it is done. This cannot be undone, so we will ask you to confirm and offer you an export first.
• Complain. Tell us and a person will look at it. If you are still not satisfied you may raise it with the relevant Indian data protection authority.

If a request concerns your own customer’s details rather than yours, we act on your instruction as the shop.

10. Security

Truthfully, and without overstating it:

• All traffic is encrypted in transit (HTTPS).
• Access is controlled at the database itself, not only in the app, so one shop cannot read another shop’s records.
• Staff logins are separate from the owner’s, with their own permissions, and staff cannot delete sales, customers or karigar records.
• Shops that need it can switch on an additional lock that encrypts sensitive cash records with a key only the owner holds. If that key is lost, we cannot recover those records · that is the point of it, and we say so plainly before it is turned on.

No system is perfect. If there is ever a breach affecting your data, we will tell you what happened, what was affected and what we are doing, without waiting to be asked.

11. Children

Atelier is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

12. Changes to this policy

If we change this policy in a way that materially affects you, we will tell you by email before it takes effect. The date at the top of this page is the date the current version took effect.

13. Contact

For anything in this policy, including an export or a deletion request:

ateliercustomercare@gmail.com
+91 89492 67197
Registered details — contact page