Privacy Policy

Overview

ATELIARA is salon operations software: a web app at ateliara.com and companion iOS and Android apps. ATELIARA is owned and operated by Ateliara LLC, a Utah limited liability company, United States. This policy explains what information we collect through the web app and mobile apps, how we use it, and the choices you have. It applies whether you are a salon owner, a stylist using the staff app, or a client booking an appointment.

ATELIARA is provided to salons. The salon you visit or work at is the business responsible for its client and appointment records, and ATELIARA acts as the software that stores and processes that information on the salon's behalf.

Information we collect

• Account information. Name, email address, and phone number, whether you sign up as a salon owner, a stylist, or a client.
• Salon business data. Client records, appointment history, services booked, notes added by a stylist, and sales or checkout records created through the app.
• Payment information. When a card is saved or a payment is taken, the payment is processed directly by Stripe, our payment processor. If we add another payment processor, this policy will name it here before it is enabled. ATELIARA never sees or stores full card numbers, CVV codes, or other complete card data. We only store a token the processor gives us to reference the payment method, not the card itself.
• Push notification data. If you enable notifications in the ATELIARA mobile app, we register a device token through Expo's notification service so we can send appointment reminders and updates. This token identifies your device for notifications only.
• Technical information. IP address, device and browser type, and request timestamps, used for security (such as blocking abusive traffic) and for diagnosing problems.

We do not collect precise location, contacts, or microphone data. The images we store are these: a salon logo, a stylist’s profile photo, and photos of their work, all added by the salon; before and after photos of a client, added by the salon’s staff to that client’s record, seen only by that salon’s team, and deleted if the client is erased; and the signature you draw if you sign a form or a booth-rent contract. If you use the Feedback button during our beta, we also keep the screenshot it takes of your screen at that moment, together with your note; it shows whatever was on your screen, so it can include client names, and you can untick it before sending. We use it only to fix what you reported. We never ask a client for a photo. We do not collect advertising identifiers, and we do not build behavioral advertising profiles.

How we use information

• To operate the booking calendar: showing appointments, applying a salon's own deposit and cancellation policies, and preventing double bookings.
• To send appointment confirmations, reminders, and cancellation notices by email, SMS, or push notification. Marketing messages, when a salon sends them, always honor opt outs.
• To provide customer support and resolve reported issues.
• To secure accounts: authentication, rate limiting, and audit logging of account activity.

No ad tracking, no sale of data

ATELIARA does not run advertising, does not use third-party analytics or advertising SDKs, and does not track you across other companies' apps or websites. We do not sell personal data, and we do not share it with third parties for their own marketing purposes. The only outside parties that ever see personal data are the service providers described below, and only so they can provide the service.

Text messaging

If you agree to receive appointment texts, we use your mobile number only to send you those messages. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. The messaging provider that delivers a text sees the number only so it can deliver it. The full program terms, including how to reply STOP or HELP, are at ateliara.com/sms.

Who we share information with

We share information only as needed to run the service:

• Our payment processor (Stripe) to process payments and refunds.
• Messaging providers that deliver our emails, text messages, and push notifications on our behalf.
• Hosting and infrastructure providers that store and run the service.
• Our AI assistant provider (Anthropic), where the booking assistant is running on a salon's booking page. What you type into that chat is sent to Anthropic to produce the reply. It is part of the Studio plan and off by default: the salon's owner chooses whether to switch it on for that salon's own booking page, and can switch it off again at any time.
• Legal requirements, if we are required to disclose information by law.

We never sell personal data.

Cookies and local storage

The ATELIARA web app uses only functional cookies and local storage: keeping you signed in, remembering your display preferences, and saving in-progress form drafts. There are no third-party tracking, analytics, or advertising cookies, which is why you will not see a cookie consent banner. If that ever changes, we will update this policy and ask for consent first.

When you open a salon's booking page from a link the salon shared, such as the link in its Instagram bio, that browser tab remembers which link you came from, using a random number that is deleted when you close the tab. ATELIARA uses it only to tell that salon how many visits and bookings came from the link. It is not a cookie, it is not shared with anyone, and it does not identify you or your device. The booking itself stores only which link it came through.

Data retention and deleting your account

A salon's business records (client lists, appointment history, service menus) are kept for as long as the salon maintains its account, plus a reasonable window for ordinary business record keeping.

You can request deletion of your personal account information at any time, today, in one of three ways:

• In the web app. Sign in to the ATELIARA web app and open Settings (or, for clients, the Account tab of your client portal), then choose "Delete my account" under Your Data.
• In the mobile app. Open Profile (clients) or More > Profile (staff), then Data & privacy > "Delete my account". The 30-day grace period below applies.
• By email. Send a deletion request to the contact address below from the email address on your account.

Once requested, there is a 30-day grace period during which you can cancel the request and nothing is touched. After that, your personal identifiers (name, email, phone, and free-form notes) are permanently anonymized. A salon's aggregate booking counts may be kept for accounting and fraud-prevention purposes, but they are no longer linked back to you.

Children's privacy

ATELIARA is a business tool for salons and their adult clients. It is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact us and we will remove it.

Your privacy rights

Wherever you are, you can ask us to access, correct, or delete your personal information, and to opt out of marketing messages (reply STOP to any text, or use the unsubscribe link in marketing email). Transactional messages, like appointment confirmations, stop once you cancel your bookings or your account with the salon.

If you are in the European Union or United Kingdom, you have rights under the GDPR / UK GDPR, including access, correction, deletion, and data portability. If you are a California resident, you have rights under the CCPA / CPRA, including the right to know what we collect and the right to delete it. We do not sell personal data as either law defines "sale."

Security

All traffic between the app and our servers is encrypted in transit. Passwords are stored using modern password hashing. Access is scoped by role, and one salon's data is never visible to another: that boundary is enforced by the database itself, not only by the app. Within a single salon, staff share the operational records they work from day to day, such as the appointment book and the sales log. Pay information is not shared between staff: the salon owner sees the payroll records, and a stylist sees only their own pay terms.

Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new effective date, and we will call out meaningful changes in the app or by email.

Contact us

Questions about this policy, or a request about your data? Email support@ateliara.com. To report a security vulnerability, email security@ateliara.com.