Privacy policy

1. Scope and roles

Atrium is operated by Creative Sparks, Adams Building, Thellakom PO, Kottayam, Kerala, India - 686630. Atrium provides project, approval, procurement, finance, and reporting software to interior-design and architecture studios. For information a studio enters about its clients, vendors, team, and projects, that studio determines the purpose of processing and Creative Sparks acts as its service provider. Creative Sparks is responsible for account, billing, security, support, and website information it collects for its own operations.

2. Information we process

We process account and contact details, studio membership and roles, project and room records, files, client decisions, commercial and GST-aware documents, procurement records, payment references, support communications, and security logs. We do not ask studios to store card credentials in Atrium. Payment providers process payment credentials under their own terms.

3. Why we use information

We use information to provide and secure the service, enforce studio access boundaries, deliver requested communications, maintain audit history, process subscriptions and client-payment records, provide support, meet legal obligations, prevent abuse, and improve reliability. We do not sell personal data.

4. Sharing and processors

Information may be processed by infrastructure, database, storage, email, observability, and payment providers only as needed to operate Atrium. Studios decide which team members and scoped client recipients can access their records. We may disclose information when required by law or to protect users and the service.

We use Vercel Web Analytics and Speed Insights for traffic and performance, Mixpanel for anonymous page and setup-funnel events, and Sentry for error diagnostics when those services are enabled. Product analytics respects browser Do Not Track and Global Privacy Control signals. Mixpanel identifiers are kept in memory and reset on a full page load. We exclude private client, payment, invitation, and password-reset links from analytics and remove query strings and workspace identifiers from tracked routes. We do not record sessions or collect form contents through these tools. Error reports omit personal details, request bodies, cookies, headers, and error-message text; diagnostic stack traces and release information help us investigate failures.

5. Retention and deletion

We retain active account data for the subscription term and keep security, audit, financial, and compliance evidence for the period reasonably required by law or legitimate operational need. A studio may request export or deletion, subject to immutable financial records, active disputes, backups, and statutory retention obligations.

6. Security and international processing

Atrium uses tenant-scoped authorization, private storage, encryption in transit, restricted production credentials, audit records, and provider access controls. Providers may process data in other regions subject to contractual and legal safeguards. No system can guarantee absolute security.

7. Your choices and rights

Depending on applicable law, individuals may request access, correction, erasure, restriction, or information about processing. Client and vendor requests should normally be directed first to the studio that collected the information. Until a dedicated privacy email is published, legal and privacy requests may be sent by post to Creative Sparks at the business address shown on this page or through the contact details in the applicable Atrium agreement.

8. Children and changes

Atrium is a business service and is not directed to children. We may update this policy as the product, providers, or law changes. Material changes will be communicated through the service or the account contact.