ATRIUM
Book as Guest →
ATRIUM
Features Pricing FAQ Changelog Privacy Terms
Book as Guest →
LEGAL COMPLIANCE

Privacy Policy

Effective Date: September 16, 2026 • Last Updated: September 16, 2026

Atrium ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our multi-tenant SaaS platform, web applications, and related services (collectively, the "App" or "Atrium").

1. Information We Collect

We collect information you provide directly, data generated automatically through platform activity, and credentials from third-party authentication services:

  • Account & Profile Data: Name, unique username (@handle), email address, phone number, profile photo, date of birth, intent (client/specialist), interest categories, and locale preferences.
  • Authentication: Salted credentials, Google OAuth profile information (Google ID, email, avatar, display name), and phone verification status.
  • Appointments & Bookings: Scheduled services, dates, times, durations, notes, and guest booking information (including secure management tokens).
  • Reviews & Ratings: Star ratings, comments, quality/value/cleanliness dimension sub-scores, and result photos.
  • Business & Staff CRM Data: Organization details, operating hours, staff profiles, and client care notes, allergy alerts, tags, and progress documentation maintained by service providers.
  • Communications: In-app messages and media exchanged in appointment and direct chat threads, along with push notification tokens (FCM).
  • Performance & Diagnostics: Anonymous app latency metrics (AppFormance), error logs, and system crash diagnostics.

2. How We Use Your Information

We process personal data solely to provide and enhance Atrium:

  • To power the "Two-Way Handshake" scheduling process between clients and independent service providers.
  • To authenticate accounts and verify user identity.
  • To send essential transactional notifications, schedule updates, and system alerts.
  • To display authentic community reviews and service ratings.
  • To assist service providers in tracking client preferences and allergy alerts for safe service delivery.

We strictly prohibit the sale of your personal data to third-party marketers or data brokers.

3. Data Sharing and Disclosure

We share information only under limited operational conditions:

  • With Service Providers: Your booking details and contact profile are shared with the specific organization and specialist you book with.
  • Infrastructure Partners: Google Cloud Platform & Firebase (encrypted hosting and database in Frankfurt, EU), Resend (transactional email), and Apple APNs / Google FCM (push notifications).
  • Legal Compliance: When required by enforceable court orders, law, or public authorities.

4. Data Storage and Protection

Your data is secured using modern industry standards:

  • Encryption: Data is encrypted in transit (TLS 1.3) and at rest via Google Cloud Platform encryption.
  • Access Control: Granular role-based security rules isolate user data and organization records.
  • Infrastructure: Enterprise-grade security hosted within our European Union (Frankfurt) cloud cluster.

5. Data Retention, Deletion, and Anonymization

You can request account deletion at any time in the app via Settings > Privacy & Security > Account & Data > Delete Account or by emailing [email protected].

A. Pre-Flight Requirements

Users must transfer sole ownership of any organizations and resolve any pending upcoming appointments before deletion can be initiated.

B. The 7-Day Soft-Delete Grace Period

Once initiated, your account is immediately hidden and deactivated. You have 7 days to log back in to cancel the deletion request if you change your mind.

C. Permanent Purge & Anonymization

After 7 days, our scheduled automated purge executes irreversibly:

  • Permanently Erased: Your profile document (users/{uid}), authentication record, login credentials, contact info, and notification tokens are completely deleted.
  • Permanently Anonymized for Business Integrity: Reviews, ratings, and past appointment logs remain to preserve aggregate business ratings and historical accounting records. However, all identifying references are stripped and permanently replaced with "Atrium User" with avatar removed.
  • No Link to Future Accounts: Any account you create in the future will receive a new unique identifier and will never be connected or linked to past anonymized reviews or records.

6. Your Privacy Rights

Under GDPR, CCPA, and applicable laws, you have the right to access, rectify, port, or request deletion of your personal data. You may exercise these rights within the app settings or by contacting our Data Protection Officer.

7. Contact Us

If you have questions about this Privacy Policy or our data practices: