Privacy policy

Last updated: 13 October 2026

Data controller

Andy Gomez — info@ateliercocina.com. For any question about your data, write to that email address.

What data we process

Your email address, name, Google or Apple sign-in identifier, and optional photo and description; the restaurant, its city or area if you provide it, and your role in the team; the recipes, ideas, menus, products, conversations and files you upload. We also process technical data about sessions, devices, errors and AI usage to keep the service running and to control quotas and the budget.

Your team and artificial intelligence

The restaurant’s content is shared with its members according to their permissions. The Everyday chat uses Google Gemini and the Creative chat uses Anthropic Claude. We send the message, a limited part of the conversation and the culinary context needed to reply. That context includes the profile name of the person writing, the city or area if one was given, and the current month, to suggest seasonal produce. To keep track of long conversations we store a short summary of the oldest messages: it is written by the same provider that replies in that turn and is deleted together with the conversation. Z.AI (GLM) processes the recipes and the documents or images you choose to analyse, menu styles and the learning of culinary preferences. Recipe costs are calculated with rules, without sending the price database to the AI for that calculation.

In Profile → Our kitchen you can set the restaurant’s style and its city or area, and manage its memory. Culinary memory is on in new restaurants and in those that have not made any choice yet; you can turn it off in Profile → Our kitchen or with the chat’s “Memory” button. It learns from recipes in test or approved, when one is uploaded and once a week: it analyses a limited selection of recipes and stores short trends, shared by the team. It also counts, without AI, the ingredients that appear most often in those recipes. You can correct the trends, exclude them or delete them. Turning memory off does not by itself delete preferences already saved. People with permission can save “Chef’s notes” from the chat (up to 10, of 160 characters each): they are sent to the assistant as restaurant context, are deleted one by one and are removed together with the restaurant. This context guides replies; it does not train a model of Atelier’s own.

We keep a short technical log of published trends to review learning errors. The daily review removes from the active database the content of that log that is older than 30 days. Deleting the memory also removes that historical content; usage records are kept separately.

Who we work with

Vercel hosts the server and files; Neon runs the database; Google and Apple provide sign-in; Anthropic, Google and Z.AI provide the AI features; Sentry receives technical diagnostics. Google Drive stores encrypted backups, with the key kept separately. Stripe is used when payment features are used. These providers may act as processors or as controllers of their own services, depending on the operation.

API terms differ from the terms of their consumer chats. You can read those of Anthropic, Google Gemini and the Z.AI API agreement. Atelier’s Gemini API has billing enabled. Anthropic states that it does not use API data for training unless otherwise agreed; Google excludes content from its paid services from product improvement. Z.AI states that it processes API content in real time without storing it. Legal and security exceptions and technical data are governed by each provider’s terms.

Where data is processed

Atelier’s server and database are set up in European regions. That does not mean every provider processes data only in Europe: services outside the European Economic Area may be involved, including the United States and Singapore; Z.AI names Singapore in its API agreement. Transfers are subject to the providers’ applicable mechanisms and safeguards, such as adequacy decisions or contractual clauses where applicable. You can ask us about the recipients and the applicable safeguards at the contact email.

Legal basis

We process the data needed to provide the features you use (performance of the contract). To protect accounts, fix faults and prevent abuse we rely on our legitimate interest in keeping the service secure; we also comply with applicable legal obligations. When processing requires consent, we will ask for it and you can withdraw it. We do not use AI to make decisions with legal effects on you.

Permissions and data on your phone

Camera, photo library and microphone are used for the features you choose and require the device’s permissions. Dictation may use your system’s speech recognition services. You can revoke these permissions in the settings. We store the session and some drafts or pending actions on the phone to recover your work and sync it when you are back online. Do not include sensitive personal data of customers or colleagues in documents sent to the AI.

Your rights

You can request access, rectification, erasure, portability, restriction of or objection to processing, where applicable, by writing to the email above. You can lodge a complaint with the data protection authority of your country; in Italy, the Garante per la protezione dei dati personali. You can also delete your account directly in the app (Profile → Delete account) or by following the instructions at /en/delete-account.

Retention

We keep account data while you use the service. When you delete your account, we remove the sign-in and profile data; if contributions shared with other members remain, we keep the restaurant’s content and replace your profile identification. Deleting the account does not automatically erase personal data you have written inside recipes or conversations: contact us to review that content. If you are the last member, the restaurant is deleted too. The last administrator of a restaurant with other members must first appoint another administrator.

Security and usage records may be kept for as long as they are needed to resolve incidents, control spending, prevent abuse or meet legal obligations. Recipes, menus and products you delete go to the trash, where you can recover them for 7 days; after that they are permanently deleted. During the pilot we keep the encrypted backups for recovery and review whether they are needed when that stage ends: they are not purged automatically when an account is deleted. An erasure request also requires reviewing those backups and the providers’ time limits. The backups are not used for the chat or to learn preferences.

What we don’t do

We don’t sell your data to third parties and we don’t show ads.