Privacy policy

This policy explains what personal data VAKYRO PRIVATE LIMITED (“atelier99”, “we”) collects when you use https://atelier99.tech, why, who it is shared with, and the choices you have. It is written to meet India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

• Account details: your name, email address and password. Passwords are stored only as a salted one-way hash; we cannot read them.
• Your work: reference images and notes you upload, and the designs, projects and versions created from them.
• Billing records: credit purchases, balances, charges and refunds, and the order and payment IDs from our payment partner. Card, UPI and bank details are entered directly with Razorpay and are never sent to or stored by us.
• Technical data: your IP address, browser request details and timestamps, kept in server logs for security, abuse prevention and troubleshooting.
• Welcome-bonus abuse checks: a first-party device cookie and keyed hashes of your email, network address and a coarse browser fingerprint (browser, language, time zone, screen and device capabilities). We use these to detect repeat promotional claims, including after account deletion. The fingerprint is not used for advertising and does not include canvas images, font scans or your designs.
• Early-access requests: if you join the waitlist, the name, email, role and details you submit, with the time and version of your consent.
• Usage analytics, only if you accept: pages visited, how you arrived, approximate location, device and browser, buttons clicked, and product actions such as signing up, starting a generation, exporting a file or buying credits, including the purchase amount. We do not send analytics your name, email, reference images, notes or design content.

Why we use it

• To provide the service: sign-in, generating and saving your designs, and delivering credits you buy.
• To process payments, issue invoices and meet tax and accounting obligations.
• To send service emails: sign-in codes, verification and password-reset links, receipts, invoices, and balance or usage notices.
• To keep the service secure: rate limiting, fraud and abuse prevention, and investigating errors.
• For early-access requests only: to manage invitations and send occasional product updates you agreed to.
• With your consent only: to understand how people find and use atelier99 and improve it.

We do not sell your personal data, show advertising, or use advertising trackers. We do not use your uploads or designs to train AI models.

Who we share it with

We share data only with the service providers needed to run atelier99, each bound to use it only to provide their service to us:

• Amazon Web Services (Mumbai, India): hosting, database and file storage.
• OpenAI (United States): your reference image and notes are sent to generate and refine designs.
• Tripo and, where you choose it, Meshy: cropped reference images are sent to generate 3D sculpted parts.
• Razorpay (India): payment processing and refunds.
• Resend (United States): delivery of service emails.
• Cloudflare Turnstile: when the welcome-credit campaign is enabled, checks signup requests for automated abuse using browser and network signals.
• Google Analytics (United States), only if you accept analytics cookies: usage analytics, with advertising features turned off.

Some of these providers process data outside India. We may also disclose data where required by law or to protect our users, our service or the public.

Cookies

We use the essential cookie atelier_session to keep you signed in. It is set only when you sign in, is not readable by scripts, and expires after your session ends or at the latest after 30 days. When the welcome-credit campaign is enabled, the signup page also sets atelier_bonus_device, a signed, script-inaccessible security cookie lasting up to one year, to prevent repeat bonuses. If you accept analytics, Google Analytics sets _ga and _ga_* cookies lasting up to two years; without your acceptance they are not set and nothing is sent to Google. You can change your choice at any time with the “Cookie settings” link in the footer of our home and policy pages; declining removes these cookies. We use no advertising cookies.

How long we keep it

• Your account, projects and uploads are kept until you delete them or delete your account. Deleting your account removes your projects, uploads, generated models and sessions.
• Payment, invoice and credit records are kept after account deletion for as long as tax and accounting law requires.
• Welcome-bonus receipts and hashed eligibility signals remain for the life of the promotional campaign, including after account deletion, to prevent repeated claims. Contact us to request a review if a shared device or network affects your eligibility.
• Server logs are kept for up to 30 days. Email links and codes expire within 24 hours.
• Google Analytics event data is kept for up to 14 months.

Security

Data is encrypted in transit (HTTPS) and at rest. The database and storage are not reachable from the internet, access is limited to the systems that need it, and secrets are held in a managed secret store.

Your rights

You can ask us to give you a summary of your personal data, correct or update it, or erase it; you can withdraw consent to optional uses such as product updates; and you can nominate someone to exercise these rights on your behalf. To make a request, email vakyroprivatelimited@gmail.com from the address on your account; we act on it within 30 days. If you are not satisfied with our response, you can contact our grievance officer (see Contact Us) and, after that, the Data Protection Board of India.

Children

atelier99 is for professional use and is not intended for anyone under 18. We do not knowingly collect data from children.

Changes

If we make significant changes to this policy we will update the date above and, where appropriate, tell you by email before they take effect.

Contact

VAKYRO PRIVATE LIMITED, 23, Vajra, 6cross,3 floor, Rangappa road, Banashankari III Stage, Bangalore South, Bangalore- 560085, Karnataka. Email vakyroprivatelimited@gmail.com. Grievance officer: ADITYA REVANKAR P.