Privacy, security and trust

Ateliq is built so that a shopper can use it without giving anything away. Tracking runs on the screen, nothing is recorded, and anything that leaves the screen does so because the shopper asked.

Consent before the camera

• A start screen asks for camera consent once per visit. Nothing opens the camera until the shopper taps Start.
• The consent text always says that hands are followed, that hands are treated as biometric data, and that nothing is recorded. If you write your own consent text, these lines are added to it.
• The start screen says plainly that the stylist is an AI and that staff are available.
• A shopper can decline and still try everything on a model photo.

What stays on the screen

• Camera frames, face, body and hand tracking, and ring-size readings never leave the screen.
• Tracking places pieces. It never measures the shopper.
• The style scan reads face shape and undertone on the screen and takes no photo.
• An optional on-screen guess of women, men or kids only highlights a button for the shopper to confirm with a tap. It is never sent, logged, stored or spoken, and it is off unless you switch it on for a store.
• A tag scan sends only the product code.

What leaves the screen, and why

What is never collected or inferred

• No body shape, ever. Ateliq never infers body build or shape, race, ethnicity or weight. An automated test stops the software from building if code that reads or names body shape ever appears.
• The stylist never asks about or guesses race, religion, caste, nationality, weight or health, and never comments on body, weight, age or attractiveness.
• Mood is recorded only when the shopper says it, and is never saved.
• A shopper's profile refuses mood, age, body, weight, race, ethnicity, religion and caste.
• Ateliq does not count people. Footfall comes from your own door counts.

Children

• No photos of children: in the kids section, See it for real, the style photo, the style scan and the size sheet are switched off ("A stylist can measure for size.").
• No designs in the kids section.
• A child's size stays on the visit only, never in a profile, and is never shared.

Remembered only by choice

• A visit is forgotten when it ends, or after two minutes with nobody at the screen.
• Shoppers choose to be remembered on their phone. Follow-ups need a second, separate opt-in confirmed with a six-digit code. See Follow-ups and consent.
• Only screened preferences go to head office for follow-ups: sizes, ring size, metal, occasions and colours. Never undertone, face, body, notes, budget or loved pieces.
• Every opt-in, opt-out and deletion is logged without contact details.
• Forget me on the phone deletes the profile, saved looks and the phone's key at once, and deletes the profile in head office. If head office can't be reached, the deletion is queued and retried until it succeeds. Shoppers you sent to your CRM are deleted there too.

AI labels

• The start screen says the stylist is an AI.
• Every design made from a cloth is labelled "A design idea made with AI".
• Approved design concepts on the mirror are marked "not in store yet".
• The models in "Use our model instead" are fictional and AI-made.

Your team's approvals

None of the AI agents can show anything to a shopper or post in public. A person with the right to publish approves every trend board, design concept, campaign, product shoot and message template before it is used. See Approvals.

Security and certification

• Nagent, the company behind Ateliq, is ISO/IEC 27001:2022 certified and has a SOC 2 Type II report. The report is shared under NDA; ask us.
• Ateliq is GDPR, CCPA and DPDP Act aligned.
• Head office signs in with Google or Microsoft on your verified domain, alongside passwords and passkeys. There is no SAML or SCIM yet.
• Screens use a per-store key that opens only the kiosk screens, never head office or the store view. See Devices and kiosk keys.

For how long each kind of data is kept, see Data retention.