Privacy Policy

1. Who We Are

Atellier ("we", "us", "our") is operated by Worldwide Signage Ltd., a Colorado company. We provide a multi-tenant business operating system for creative companies. This Privacy Policy explains what personal data we handle as a Controller (for our own account holders and website visitors) and as a Processor (for Customer Data uploaded by our business customers about their own end users).

2. Roles & Responsibilities

• Account Data (names, emails, billing of our paying customers and their team members) — Atellier is the Controller.
• Customer Data (data our customers upload about their clients, deals, projects, end users) — Atellier is the Processor; the customer organization is the Controller. Processing is governed by the DPA.
• Marketing & website visitors — Atellier is the Controller.

If you are an end user (e.g., a client of one of our customers) and want to exercise rights about data your service provider holds about you in Atellier, contact that provider first. We will route requests we receive to the relevant Controller within 30 days.

3. Data We Collect

Account & Profile

Name, email, phone, organization name, role, password hash, profile photo. For paid plans: billing contact, address, tax ID, and payment method (collected directly by Stripe).

Usage & Device

IP address, browser type, OS, device identifiers, pages visited, features used, referrer, timestamps, and error logs.

Error Monitoring & Masked Error Replays

We use Sentry (Functional Software, Inc.) to detect and fix errors in the Atellier app. When an error occurs, Sentry receives technical details such as the error message, stack trace, browser and OS, the page where it happened, and limited performance timing data. When an error occurs during a signed-in app session, Sentry also captures a short replay of the moments leading up to it so we can reproduce the problem. Replays are masked before they leave your browser: all on-screen text and form inputs are replaced with placeholders and images and media are blocked, so the replay shows page layout and clicks, not your content. Replays are not recorded for sessions without an error and are not used on our public marketing pages. We use this data only to debug and improve reliability — not for advertising, profiling, or cross-site tracking — and we do not embed advertising or third-party marketing-analytics trackers. On our marketing site we record first-party, pseudonymous page and signup analytics only if you choose "Allow analytics" (see the Cookie Policy).

Consent & Acceptance Records

When you sign up we record which version of the Terms of Service and this Privacy Policy you accepted and when. When you purchase or renew a subscription we record your acceptance of the renewal terms, along with the related confirmation and reminder notices we send. We keep these records to perform our contract with you and to comply with legal obligations (Art. 6(1)(b) and (c) GDPR), for the life of your account and afterwards as long as required by law — at least three years for subscription-renewal consents.

Customer Data

Whatever you upload to your tenant: clients, contacts, deals, messages, files, photos, calendar events, payments. You retain full ownership.

Communications

Support requests, feedback, sales calls (recorded only with consent), and message content sent through our communication channels.

AI Inputs & Outputs

Prompts and context you submit to AI features and the corresponding responses. See our AI Features Addendum.

Categories We Do Not Knowingly Collect

We do not collect biometric data. The Service is not intended for use with Protected Health Information (HIPAA), and we are not a HIPAA Business Associate. See Section 3b regarding children.

3a. Our Customers' Public Pages & Forms

Our customers can use Atellier to publish their own landing pages, lead and intake forms, proposals, customer portals, and payment pages. When you submit information through one of those pages, the business that published it is the Controller of your information and Atellier processes it on that business's behalf as its Processor. Please read that business's own privacy notice and direct requests about your information to it; if you contact us instead, we will forward your request to the relevant business.

3b. Children

The Service is intended for businesses and for users who are at least 18 years old. It is not directed to children under 13 (or under 16 in the EEA and the UK), and we do not knowingly collect personal data from them. If we learn that we have collected personal data from a child, we will delete it. If you believe a child has provided us with personal data, contact hello@meonneon.com.

3c. AI Features & the Carl Assistant

Atellier includes AI-powered features, most prominently the in-app assistant Carl. Carl uses a large language model hosted by an AI sub-processor (currently OpenAI, xAI, and Google via the Lovable AI Gateway — see the Sub-Processors page) together with a retrieval layer that reads records from your organization's workspace to answer your questions and take actions you request.

• What personal data is processed. Whatever personal data is contained in the records Carl retrieves for a given prompt — typically names, emails, phone numbers, addresses, message contents, deal and project history — scoped to the active organization of the signed-in user and that user's per-app permissions. Carl cannot reach data in other tenants.
• Purpose and legal basis. Performance of the contract with the customer organization (Art. 6(1)(b) GDPR) and our and the customer's legitimate interest in delivering an effective assistant (Art. 6(1)(f)). The customer organization remains the Controller for the underlying Customer Data; Atellier acts as Processor and routes prompts and retrieved snippets to the AI sub-processor on the customer's behalf.
• No model training on Customer Data. Our AI sub-processors are contractually prohibited from training their foundation models on Customer Data, and Atellier does not do so. See §2 of the AI Features Addendum.
• Retention. Prompts, retrieved context, and responses are logged inside your tenant for audit and quality purposes and follow the same retention as other Customer Data. AI providers may transiently retain inputs for abuse-prevention per their published terms (linked from the Sub-Processors page).
• Controls and rights. Organization admins can disable Carl org-wide in Settings and can restrict which apps and records Carl may read via role permissions. Individuals may request deletion of Carl conversation history by emailing hello@meonneon.com or by asking their organization admin.
• Public Carl. A separate sandboxed assistant on our marketing site has no access to any tenant's Customer Data and only reads our public marketing and documentation content.

Full terms governing AI Features, including prohibited uses and watermarking, are in the AI Features Addendum.

4. Why We Use It (Purposes & Legal Bases)

5. AI Processing Disclosure

When you use AI Features, your prompts and surrounding context are transmitted to one or more AI providers listed on the Sub-Processors page (currently including OpenAI, xAI, Black Forest Labs, and the Lovable AI Gateway). We contractually require these providers not to train their foundation models on Customer Data. Atellier itself does not use Customer Data to train models. AI outputs are not guaranteed to be accurate; see the AI Addendum.

6. Automated Decision-Making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing without meaningful human involvement. Some product features use machine learning to surface suggestions or scores (for example, lead scoring), but these are decision-support signals reviewed by a human before any action is taken.

7. Sharing & Sub-Processors

We do not sell or share personal information for cross-context behavioral advertising. We share data only with the sub-processors listed on the Sub-Processors page, in the limited additional cases below, and as required to deliver the Service.

We may also disclose information:

• For legal compliance — when required by law, subpoena, court order, or to respond to lawful requests by public authorities;
• To protect rights and safety — to prevent fraud, abuse, threats to safety, or harm to our property or users;
• For business transfers — in connection with a merger, acquisition, financing, or sale of assets, with notice to affected customers;
• With your consent — when you authorize specific sharing.

8. International Transfers

Our infrastructure is hosted in the United States. For transfers from the EEA, UK, or Switzerland we rely on the EU Standard Contractual Clauses (Decision 2021/914) and the UK IDTA, supported by transfer impact assessments and supplementary measures (encryption, RLS, access controls). See the DPA and GDPR page.

9. Retention

10. Your Rights

• Access & portability — Export from Settings → Export all data.
• Rectification — Edit your profile and records in-app.
• Deletion — Delete your account from Settings → Password & Security → Delete Account. Active-system data is purged within 30 days; backups age out within 30 more.
• Objection / withdrawal of consent — Update marketing preferences or reply STOP to any marketing SMS.
• Restriction — Email us to pause processing while a dispute is reviewed.
• Lodge a complaint — You may complain to your local supervisory authority (see Section 13).

11. U.S. State Privacy Rights

California (CCPA / CPRA)

California residents have rights to know, delete, correct, and limit the use of sensitive personal information, plus the right to opt out of "selling" or "sharing" for cross-context behavioral advertising. We do not sell or share personal information. We honor Global Privacy Control (GPC) signals as opt-out preferences. We do not knowingly process personal information of consumers under 16. Sensitive personal information we collect (precise geolocation, login credentials) is used only to provide the Service.

Colorado, Connecticut, Virginia, Texas, Utah, Oregon, Montana

Residents of these states have rights to access, delete, correct, and obtain a portable copy of their personal data, and to opt out of targeted advertising and "sale" (we do not engage in either) and profiling that produces legal effects (we do not). To exercise rights, contact hello@meonneon.com with the subject "State Privacy Request" and your state of residence. We respond within 45 days.

12. Cookies & Tracking

Atellier uses only strictly necessary browser storage (for example, to keep you signed in and remember display preferences). We do not use advertising cookies or cross-site tracking. Our web fonts are served from Atellier's own infrastructure, so loading our pages does not send your IP address to a font provider. See our Cookie Policy for details. We honor Global Privacy Control (GPC) signals where applicable.

13. EU / UK Representatives & Authorities

If we appoint an EU Representative under GDPR Art. 27 or a UK Representative under UK GDPR Art. 27, we will publish their details here. Until then, EU and UK data subjects may contact us directly at hello@meonneon.com or lodge a complaint with their lead supervisory authority. EU lead authorities are listed at edpb.europa.eu; the UK authority is the Information Commissioner's Office at ico.org.uk.

14. Security

See our Security page for technical and organisational measures, including TLS 1.2+ in transit, AES-256 at rest, RLS data isolation, MFA/SSO availability, and our incident response and breach notification commitments.

15. Changes

We may update this policy and will revise the "Last updated" date. Material changes will be notified in-product or by email at least 30 days in advance.

16. Contact

Privacy team: hello@meonneon.com

Worldwide Signage Ltd. d/b/a Atellier
8405 W 54th Place
Arvada, Colorado 80002
United States