Legal
Privacy policy
This policy explains how Atrium handles personal data for studio members, their clients, vendors, and website visitors.Effective 28 July 2026 · Last updated 28 July 20261. Scope and roles
Atrium provides project, approval, procurement, finance, and reporting software to interior-design and architecture studios. For information a studio enters about its clients, vendors, team, and projects, that studio determines the purpose of processing and Atrium acts as its service provider. Atrium is responsible for account, billing, security, support, and website information it collects for its own operations.
2. Information we process
We process account and contact details, studio membership and roles, project and room records, files, client decisions, commercial and GST-aware documents, procurement records, payment references, support communications, and security logs. We do not ask studios to store card credentials in Atrium. Payment providers process payment credentials under their own terms.
3. Why we use information
We use information to provide and secure the service, enforce studio access boundaries, deliver requested communications, maintain audit history, process subscriptions and client-payment records, provide support, meet legal obligations, prevent abuse, and improve reliability. We do not sell personal data.
4. Sharing and processors
Information may be processed by infrastructure, database, storage, email, observability, and payment providers only as needed to operate Atrium. Studios decide which team members and scoped client recipients can access their records. We may disclose information when required by law or to protect users and the service.
5. Retention and deletion
We retain active account data for the subscription term and keep security, audit, financial, and compliance evidence for the period reasonably required by law or legitimate operational need. A studio may request export or deletion, subject to immutable financial records, active disputes, backups, and statutory retention obligations.
6. Security and international processing
Atrium uses tenant-scoped authorization, private storage, encryption in transit, restricted production credentials, audit records, and provider access controls. Providers may process data in other regions subject to contractual and legal safeguards. No system can guarantee absolute security.
7. Your choices and rights
Depending on applicable law, individuals may request access, correction, erasure, restriction, or information about processing. Client and vendor requests should normally be directed first to the studio that collected the information. Legal and privacy requests may be submitted through the contact details in the applicable Atrium agreement.
8. Children and changes
Atrium is a business service and is not directed to children. We may update this policy as the product, providers, or law changes. Material changes will be communicated through the service or the account contact.