PRIVACY POLICY

This Privacy Policy establishes the standards and computational mechanisms governing personal data collection, processing, protection, and retention when interacting with the ATELIER // ARCH digital platform, software development kits, web interfaces, and runtime environments.

The provisions herein explicitly encompass all activities conducted across our three primary creative operational subsystems:

• • 01 / DESIGN ENGINE: Spatial typography, visual framing, compositional layouts, and vector asset synthesis.
• • 02 / MARKETING ENGINE: Copy variation, conversion-optimized imagery, localized campaign suites, and editorial metadata generation.
• • 03 / PRODUCT ENGINE: Three-dimensional model generation, volumetric lighting renderers, texture mapping, and packaging specifications.

This policy additionally governs direct user interaction with support desks, billing gateways, community forums, and any fiat credit acquisition interfaces operating under the authorized control of ATELIER // ARCH.

ATELIER // ARCH adheres to strict data minimization principles. We ingest personal information strictly when necessary to deliver workstation functionality, preserve system integrity, execute transactions, and comply with mandatory legal obligations.

To utilize the generative systems, operators must register an account. During this process, we create cryptographic identity records, including salted and hashed password representations (utilizing standard Argon2id or bcrypt key-derivation architectures).

We capture electronic mail verification confirmations, password reset token requests, multi-factor authentication (MFA) dispatch metrics, and session authorization tokens. Password tokens are stored in non-reversible formats; our operators and automated sub-routines maintain zero visibility into raw authentication credentials.

The platform explicitly differentiates between User-Provided Content and Synthesized Generative Outputs:

Model Training Isolation Guarantee: We do not utilize your private workspace prompts, reference uploads, or generated asset outputs to retrain or adjust foundational base models without prior, explicit, opt-in written consent. Assets reside in customer-segregated storage partitions.

All computational usage across ATELIER // ARCH is executed via fiat currency transactions (denominated strictly in USD, EUR, or GBP) to purchase runtime compute credits or recurring platform memberships.

ATELIER // ARCH does not directly store, process, or transmit sensitive cardholder credentials (full PAN or CVV/CVC codes). All transaction workflows are routed through certified, Level-1 PCI-DSS compliant third-party payment settlement processors. We retain only non-sensitive transaction metadata: issuing financial institution, billing country, card expiration date, the last four digits of the payment method, and immutable tax invoice tokens.

We process collected information strictly for defined technical, transactional, and compliance objectives:

• Pipeline Orchestration: Allocating GPU cluster nodes, distributing compute jobs, and rendering high-fidelity creative output.
• Account & Balance Reconciliation: Maintaining credit balance records, processing refunds, and dispatching fiscal receipts.
• Security & Threat Mitigation: Monitoring anomalous API request bursts, preventing distributed denial-of-service (DDoS) events, and halting automated scraping bots.
• Operational Communications: Providing critical service announcements, security alerts, protocol upgrades, and direct assistance tickets.

In compliance with European Regulation (EU) 2016/679 (GDPR), UK GDPR, and correlated international privacy frameworks, we execute data processing operations under the following lawful foundations:

ATELIER // ARCH deploys localized browser state storage mechanisms, including strictly necessary HTTP cookies, local storage objects, and session cache tokens.

These mechanisms preserve logged-in authentication states, retain user interface configuration preferences (such as dark mode rendering parameters and canvas snap settings), and authenticate API calls. We do not operate invasive cross-site tracking cookies across unaffiliated third-party web domains.

Personal records and workspace telemetry are held only as long as an operator maintains an active account status. When an account transitions to inactive or deleted states, the following sunset schedule activates:

• Workspace Canvases & Cache: Expunged from volatile render tiers within 72 hours; purged from offline backup mirrors within [RETENTION PERIOD WHERE REQUIRED / 30 DAYS].
• System Telemetry & Network Logs: Retained for a rolling 90-day window to facilitate intrusion detection analysis before irreversible programmatic scrubbing.
• Financial Transaction Ledgers: Preserved for 7 calendar years in compliance with applicable statutory taxation and corporate ledger regulations.

ATELIER // ARCH maintains a strict corporate mandate: We do not sell, rent, monetize, or trade your personal data to data aggregators or advertising consortiums.

Personal data is dispatched solely to verified third parties under binding contractual data processing agreements:

• Infrastructure Partners: Hyperscale cloud computation providers (e.g., AWS, GCP) operating designated high-security nodes for parallel rendering.
• Payment Gateways: Authorized merchant settlement entities handling fiat billing.
• Statutory Authorities: Sovereign law enforcement agencies solely upon receipt of a legally enforceable subpoena or formal court order.

We employ comprehensive technical and organizational safeguards without reliance on hyperbolic claims. Our defense-in-depth posture incorporates:

ATELIER // ARCH operates a geographically distributed computation pipeline spanning data centers within North America, Europe, and the Asia-Pacific region.

When transferring personal information outside the European Economic Area (EEA) or the United Kingdom, we implement formal transfer mechanisms recognized under statutory laws, including the European Commission's approved Standard Contractual Clauses (SCCs), complemented by supplementary technical risk evaluations.

Depending on your geographic residency, you possess clear statutory prerogatives regarding your personal records:

Operators maintain the ability to execute irrevocable self-serve account termination at any time directly through the unified workspace interface.

Navigating to Account Settings > Security > Terminate Account triggers a multi-stage authentication verification protocol. Upon final confirmation, your session is revoked across all active devices, personal identification indices are detached, and the asset purge workflow commences.

ATELIER // ARCH is designed strictly for professional enterprise creators and adult operators. The platform is not directed to individuals under 18 years of age.

We do not knowingly collect personal data from minors. In the event that we identify an account established by an unauthorized underage user, all associated telemetry and records are flagged for immediate deletion.

As our computational models evolve and global legal frameworks shift, ATELIER // ARCH reserves the right to amend this Privacy Policy.

For material modifications altering user data rights or computational retention bounds, we will dispatch clear advance notification at least fourteen (14) days prior to enforcement via dashboard notification ribbons and direct electronic mail to the primary registered operator address. Continued platform utilization following the stated effective date constitutes full acceptance.

For regulatory inquiries, formal DSAR (Data Subject Access Request) submissions, or direct correspondence with our certified Data Protection Officer, utilize the registered coordinates below: