Privacy policy

Atelier is a service for independent professionals and small teams (such as consultants, coaches, therapists, tutors, small studios and small startups) that provides a website, online booking and private client records in one place.

Atelier (Atelier Labs) is operated by Kripind Ventures, India, which is responsible for the personal data described in this policy. In this policy, “Atelier”, “we”, “us” and “our” mean Kripind Ventures. You can contact us about privacy at any time at hello [at] labs.atelieremail [dot] com.

This policy covers the Atelier app at console.atelierlabs.net, the websites, booking pages and forms practitioners publish with Atelier, the emails Atelier sends, and this marketing website.

We handle personal data in two different roles, and it helps to know which is which.

• For practitioners’ own account data, we are the controller. When you sign up and use Atelier, we decide how your account information is used, as described in this policy.
• For the data practitioners keep about their clients and website visitors, we are a processor. The practitioner decides what is collected and why; we store and process it on their behalf and only on their instructions, to provide the service.

If you are the client of a practitioner, or you visited a practitioner’s website, the practitioner is responsible for your data. Please contact them first with any questions or requests. You can also contact us and we will pass your request on and help.

When you create and use an Atelier account, we collect:

• Account details: your name and email address.
• Your password, which is stored only as a secure hash. We never store or see the password itself.
• Your business profile: your practice name, description, contact details, website content and settings.
• Services and availability: the sessions you offer and the hours you work.
• Team members and roles: people you invite and the permissions you give them.
• Billing details, which are handled by Stripe. We never see or store full card numbers.
• AI provider keys, if you choose to add your own. These are stored encrypted.

We also keep basic technical records needed to run and secure the service, such as sign-in events and error logs.

On behalf of practitioners, Atelier stores and processes the information they and their clients put into it:

• Contact details: name, email, phone number and addresses.
• Bookings: times, services, where the session happens, and status.
• Messages and emails exchanged with the practitioner through Atelier, including website enquiries.
• Form answers submitted through the practitioner’s website.
• Session notes, AI summaries and prep notes written or saved by the practitioner.
• Tasks and follow-ups.
• Payment records: amount and status. Card details are handled by Stripe, not by Atelier.

Client contact details and session notes are encrypted at rest.

When a practitioner connects WhatsApp to Atelier, we process the messages exchanged between the practitioner’s WhatsApp Business number and their clients. This includes message content, phone numbers, profile names, timestamps and delivery status.

We use this data only to show those conversations in the practitioner’s client records and to send the messages the practitioner chooses to send.

• We do not use WhatsApp data for advertising.
• We do not sell WhatsApp data.
• We do not share WhatsApp data with anyone except the service providers listed in this policy, and only as needed to run the service.

WhatsApp data is deleted when the practitioner disconnects WhatsApp and asks for it to be deleted, or when the practitioner closes their Atelier account.

Separately, a practitioner’s contact form may offer a “Send & open WhatsApp” button. When a visitor uses it, their message is saved to the practitioner’s client records in Atelier first, and then the visitor’s own WhatsApp opens so the conversation can continue there.

We use personal data to:

• provide, maintain and secure the service;
• send the emails a practitioner sets up, such as booking confirmations, reminders and alerts;
• send you service messages about your account, such as security notices and important changes;
• provide support when you ask for it;
• meet our legal obligations.

We do not advertise. We do not sell data. We do not use practitioners’ data or their clients’ data to train AI models.

Atelier includes optional AI features, such as the editor assistant, session prep briefings and client summaries. When a practitioner uses an AI feature, we send the relevant text to the AI provider the practitioner uses: Anthropic, OpenAI or Google. Nothing is sent to an AI provider unless the practitioner uses an AI feature.

AI features only make proposals. The assistant proposes; the practitioner decides whether to accept, edit or discard what it suggests.

If a practitioner adds their own AI provider key, requests are made with that key, and the key is stored encrypted.

We use a small number of trusted companies to run Atelier. They process data only as needed to provide their part of the service.

Atelier’s data is stored on servers operated by our hosting provider, DigitalOcean, in New York, United States, with encrypted backups via Cloudflare. Some service providers listed above may process data in other countries; where they do, they handle it under their own data-protection commitments.

We use only the cookies that are needed:

• Sign-in and security cookies in the Atelier app, to keep you signed in and protect your account.
• A preview cookie for people a practitioner invites to review a website before it is published.
• Cloudflare’s spam-protection cookies on forms.
• Stripe’s cookies on payment pages.
• If a practitioner adds their own analytics or marketing tags to their website (such as Google Analytics, Google Tag Manager or Meta Pixel) or their own code, those services may set their own cookies on that practitioner’s site. The practitioner is responsible for those choices and for telling their visitors.

Atelier itself sets no advertising or tracking cookies. This marketing website uses no cookies at all.

We keep data for as long as the account is active. When an account is closed, we delete its data within 90 days, except:

• backups, which expire on their normal cycle; and
• records we must keep by law, such as invoices.

Practitioners can export their clients, notes and bookings at any time before closing their account.

You can ask us to:

• access the personal data we hold about you;
• correct data that is wrong or incomplete;
• export your data in a portable format;
• delete your data;
• object to or ask us to restrict how we use it.

To exercise any of these rights, email hello [at] labs.atelieremail [dot] com. We may need to confirm your identity first. For deletion, see our data deletion instructions.

If you are the client of a practitioner who uses Atelier, please contact the practitioner first, because they control your records. If you contact us instead, we will pass your request on and help.

We protect data with:

• encryption in transit (HTTPS) for all connections;
• encryption at rest for sensitive fields, including client contact details, session notes and AI provider keys;
• access controls, including per-area permissions for practitioners’ team members;
• backups, which are encrypted.

No system is perfectly secure, but we take great care to protect your data.

Atelier is not directed at children under 18, and practitioner accounts are for adults only. We do not knowingly collect personal data from children for our own purposes.

If we make changes to this policy, we will update the date below and post the new version on this page. If a change is significant, we will tell practitioners by email or in the Atelier app before it takes effect.

Last updated: 26 October 2026

For any privacy question, request or complaint, contact us at hello [at] labs.atelieremail [dot] com.

In accordance with Indian law, our grievance officer is: