Privacy Policy

Last updated: August 7, 2026

Effective date: August 7, 2026

This policy explains how your personal data is collected, used, retained, and shared when you use Ateliat, including the mobile application, related web interfaces, and support services.

Ateliat lets you find, in one place, the products and services you acquired from creators using Chariow, including files, courses, licenses, bundles, coaching sessions, services, and tickets.

Ateliat currently does not allow you to purchase or gift a product within the application. When a link takes you to Chariow, a creator’s website, or another external service, that service’s terms and policies apply.

  • We do not sell your personal data.
  • Ateliat does not store your complete payment card details.
  • Ateliat does not use your data to display behavioral advertising in the application.
  • You may request access to, correction of, or deletion of your data, subject to applicable law.

1. Data controller

Ateliat is published and operated by Axa Zara LLC, a company registered in the State of Delaware, United States, located at Coastal Highway, Lewes, Delaware 19958, United States. You may contact us at support@chariow.com.

Axa Zara LLC primarily acts as the data controller for data relating to your account, authentication, access to your purchases, security, and the operation of Ateliat.

The creators or sellers from whom you purchased a product may act as independent data controllers for the sale, delivery of the product, support, refunds, invoicing, and their communications.

2. Who this policy covers

  • Buyers of products or services distributed through Chariow.
  • Users who access Ateliat through a sign-in code or an external identity provider.
  • People who contact a creator or support through Ateliat.

3. Data we process

3.1 Identity and profile data

You can change or remove optional information from your profile when that feature is available.

  • First and last name, email address, phone number, and associated country.
  • Age range, gender, interests, and avatar when you choose to provide them.
  • Internal Ateliat or Chariow identifiers and verification, registration, sign-in, and activity dates.

3.2 Authentication data

We do not receive the password you use with an external identity provider.

  • Email address and limited-use sign-in code.
  • Session tokens and related technical identifiers.
  • Linking identifiers for Apple, Google, Microsoft, Yahoo, or Axa Zara when you select one of these methods.
  • Basic information sent by the identity provider, such as a verified email address and, depending on the provider, your name.

3.3 Purchases and access rights

This data comes from Chariow and is used to display and deliver purchases previously made outside Ateliat. Ateliat is not designed to store your complete payment card details.

  • Order references, dates, statuses, and amounts.
  • Store or creator identity and the product’s name, type, description, and visuals.
  • Access rights, files, metadata, invoices, and download links.
  • License keys, status, expiration date, and number of activations.
  • Courses, chapters, lessons, and progress.
  • Coaching information, including date, time zone, location, meeting link, notes, and cancellation reason.

3.4 Data you provide

  • Notification preferences.
  • Ratings, reviews, and comments about a purchase.
  • Messages sent to a creator, store, or support.
  • Callback number, coaching cancellation reason, and information related to an account deletion request.

3.5 Device, notification, and usage data

Ateliat currently uses Google Firebase Analytics, Firebase Crashlytics, and Firebase Cloud Messaging. Depending on their function, these services may process installation identifiers, device data, usage events, and diagnostics.

  • Firebase Cloud Messaging or Apple Push Notification service token.
  • Device type, operating system, application version, language, time zone, and network information.
  • IP address, installation identifiers, request logs, usage events, and interactions.
  • Diagnostics, error traces, crash reports, and related technical data.

3.6 Data stored on your device

Offline documents are stored in the application’s private area and excluded from system backups when the platform permits. Deleting the application normally removes its local data, subject to how your device backups operate.

  • Session token and a cached copy of your profile.
  • Your purchase list and related metadata.
  • Course progress and coaching information.
  • Recent searches and documents downloaded for offline access.

4. Mobile permissions

Ateliat requests only the permissions needed for its features, including internet access and, with your permission, the ability to display notifications.

Ateliat does not request general access to your contacts, location, microphone, or camera. The system file picker may be used without giving Ateliat general access to your device content.

5. Sources of data

  • Directly from you.
  • From your Chariow profile and purchase history.
  • From creators or stores involved in your purchases.
  • From the identity provider you choose.
  • From payment providers solely for the status of a Chariow-related transaction, without receiving your complete card details.
  • Automatically from your device and our systems when you use the service.

6. Purposes and legal bases

Providing the service

These processing activities are necessary to provide the service and fulfill commitments associated with your purchase.

  • Authenticating you, securing your session, and displaying your purchases.
  • Delivering files, licenses, courses, coaching sessions, and other access rights.
  • Enabling offline access and synchronizing your progress.

Personalizing and communicating

Depending on the context and applicable law, we rely on performance of the service, your consent, or our legitimate interest in providing useful support.

  • Managing your profile and preferences.
  • Sending operational notifications, security alerts, and communications you have authorized.
  • Forwarding your requests to the relevant creator and providing support.

Improving and protecting Ateliat

We rely on your consent where required, our legitimate interests in security and improvement, or a legal obligation. You may withdraw your consent at any time without affecting processing already carried out lawfully.

  • Measuring usage, diagnosing errors, and improving stability.
  • Preventing fraud, abuse, and unauthorized access.
  • Complying with the law, handling your requests, and defending our rights.

7. Notifications and communications

You can update your preferences in Ateliat and withdraw notification permission in your device settings. Communications strictly necessary for the service or security may continue.

  • Sign-in codes and security alerts.
  • Information about your purchases and access rights.
  • Coaching reminders or license expiration notices.
  • Responses from support or a creator.
  • News or recommendations only when permitted by law and authorized by you.

8. Sharing data

We do not sell your personal data. We disclose it only when necessary to the following categories of recipients.

Creators and stores

The relevant creator may receive information needed to deliver the product, provide support or coaching, process a review, or handle a refund request. A message sent from Ateliat may include your name, email, phone number, and the relevant purchase reference.

Technical service providers

These providers receive only the data needed for their role and are subject to appropriate contractual obligations.

  • Hosting, storage, and secure content delivery.
  • Email and notification delivery.
  • Audience measurement, diagnostics, and crash management.
  • Security, fraud prevention, and support.

Identity providers and authorities

If you choose an external sign-in method, the relevant provider processes data under its own policy. We may also disclose data when required by law, a court order, or a valid government request, to protect users or defend our rights, or as part of a corporate transaction subject to appropriate safeguards.

9. International transfers

Axa Zara LLC is established in the United States, and some providers operate in several countries. Your data may therefore be processed outside your country of residence.

Where required by law, we use a recognized transfer mechanism, such as appropriate contractual clauses, and apply supplementary safeguards when necessary.

10. Retention periods

Residual copies may remain temporarily in secure backups until their normal rotation.

  • Ateliat profile: while the account is in use and until an account deletion request is completed.
  • Sign-in code: for its short validity period, currently 15 minutes, and then invalidated.
  • Temporary external authentication state: currently 10 minutes.
  • Session and notification tokens: until expiration, revocation, sign-out, or account deletion.
  • Cache and local files: until deleted, signed out, the account is deleted, or the application is uninstalled, depending on the data.
  • Progress and access rights: while the account and corresponding right remain active, unless otherwise required.
  • Messages, reviews, and requests: while handled and then for the period needed for evidence and disputes.
  • Transactions, invoices, and accounting records: for the period required by law, which may be up to 10 years.
  • Firebase Crashlytics reports: under Google’s rules, generally 90 days before deletion begins.

11. Account deletion

When the feature is available, you may request account deletion from Ateliat. The process uses a confirmation code sent by email, followed by a 30-day grace period during which you may cancel your request.

At the end of that period, deletion revokes account access, removes tokens and preferences linked to the profile, causes you to lose access to products through Ateliat, and may cancel upcoming coaching sessions.

Invoices and other records that creators or Axa Zara LLC must retain may be kept in a limited or anonymized form.

12. Your rights

To exercise a right, email support@chariow.com with the email address used for Ateliat and the nature of your request. We may reasonably verify your identity.

A request may be limited when retention is necessary to meet a legal obligation, protect another person’s rights, or establish, exercise, or defend a legal claim. Ateliat currently makes no decision with significant legal effects based solely on automated processing.

  • Confirm whether we process your data and access it.
  • Correct inaccurate data.
  • Request deletion or restriction of processing.
  • Object to certain processing and withdraw your consent.
  • Receive certain data in a portable format.
  • Not be subject to a decision with significant legal effects based solely on automated processing.
  • File a complaint with the relevant supervisory authority.

13. Security

No system is completely secure. You must protect access to your device and promptly report any unauthorized use to us.

  • Encryption of communications in transit.
  • Authentication through a time-limited code or identity provider.
  • Revocable session tokens and sign-in attempt limits.
  • Temporary signed links for certain content.
  • Private storage for offline documents.
  • Access controls, security logging, and cache deletion upon sign-out.

14. Children and minors

Ateliat is not intended for anyone under 18 or below the legal age required to enter into a contract in their country. If you believe a minor has provided data to us without proper authorization, please contact us.

15. Third-party services, cookies, and similar technologies

Ateliat may open or embed a video, meeting link, Chariow page, or creator website. These third parties may collect data under their own policies. Review their terms when you leave Ateliat or interact with their content.

The mobile application uses local identifiers, tokens, and SDKs for sessions, notifications, security, analytics, and stability. Web pages or external windows opened from Ateliat may use their own cookies.

16. Changes to this policy

We may update this policy to reflect changes to the service, our providers, or the law. If a change is material, we will give you appropriate notice before it takes effect when required by law. The date at the top identifies the latest version.

17. Contact

For any question, complaint, or request concerning your data, contact Axa Zara LLC at support@chariow.com or write to Coastal Highway, Lewes, Delaware 19958, United States.

Read the Terms of Use and Service