Security
Specific, honest, and accurate about your data.
You upload photos of your home. Here is exactly where they go, how they are protected, and what controls you have over them.
Storage
Where your data lives.
All account data, room photos, and render results are stored in a Postgres database hosted by Neon on AWS in the United States. Image bytes are stored as base64 in the database rather than in a separate object store, so there is one system to back up and one system to delete from.
We do not replicate your room photos to other systems, other regions, or other providers outside the ones listed under Subprocessors below.
Provider: Neon Postgres over the serverless HTTP driver. No persistent connection pool in front. Hosted on AWS, US East.
Data use
Room photos are used for rendering, nothing else.
A room photo you upload is passed to the AI pipeline to produce your redesign. Once the render is complete, the original photo and the render are stored in your account so you can view, compare, export, and delete them.
We do not use your room photos to train AI models. We do not analyze them for advertising, profiling, or any purpose outside the rendering pipeline. We do not sell them or share them with third parties except the subprocessors required to run the pipeline.
Encryption
In transit and at rest.
All connections between your browser and Atelier are encrypted over HTTPS using TLS 1.2 or higher. Connections between the application and the Neon database use TLS. Connections to OpenAI and Stripe use HTTPS.
Data at rest in the Neon database is encrypted by Neon using AES-256. Passwords are hashed using scrypt with a random salt before they are stored. We never store plaintext passwords.
Passwords: hashed with scrypt, 64-byte key, random 16-byte salt per password. Comparison uses a constant-time function.
Your controls
Export and delete, any time.
From your account settings you can download a JSON file of everything we hold: your account details, the rooms you have created, the room photos, and the redesigns. The export includes direct URLs to your image files.
You can delete your account and all associated data permanently. The delete removes your images, renders, rooms, and account record from the database immediately. There is no grace period and no recovery after deletion.
These controls are available to everyone, on every plan, for free.
Go to your data settingsWe do not sell your data. Atelier is a software product. We charge for redesigns. Your photos, rooms, and account data are not a product we sell to anyone.
Subprocessors
Who receives your data.
Vision and language model inference
Room photos and prompts are sent to OpenAI for the understand and pieces steps. OpenAI's terms prohibit training on API data by default.
Postgres database
Account records, room metadata, render results, and image bytes are stored in a Neon Postgres database, hosted on AWS in the United States.
Application hosting
The web application and API routes run on Vercel. Vercel's infrastructure is hosted on AWS and GCP in the United States and other regions.
Payment processing
Paid subscriptions are processed by Stripe. We do not receive or store card numbers. Stripe's security is independently certified to PCI DSS Level 1.
See your room, redesigned.
One photo, a style you choose, and a finished room to decide with. Free to start, no card.