Privacy Policy

Atech ApS (CVR 46391942, Lille Strandstræde 6A, st. th., 1254 København K, Denmark) runs atech.dev, including studio, our editor, and is the data controller for the personal data described here. Questions or requests: [email protected].

• Your account: your email address, and a password if you sign up with one (stored only as a secure hash by our authentication provider). If you continue with Google, Google shares your name, email address and profile picture with us. Your profile: display name, account type, theme, notes you give the assistant, a profile picture if you upload one, and your plan. Used to log you in and keep your projects. Legal basis: our contract with you.
• Your projects: prompts, chat messages, the images and PDFs you attach, photos you add, and what we generate from them: board layouts, parts lists, firmware source and build results; and the thumbs up or down you give an assistant reply. Sent to our AI provider to design your product and write its code. Our team can read your projects (the conversation, the board and what you rated) to see how the editor is used, improve the assistant and fix problems; we cannot change them. Projects made without signing in are not tied to an account: anyone who has the project’s link can open it, so treat that link like a password. Legal basis: our contract with you.
• Usage records:for each piece of work the editor does for you, what ran, when, whether it succeeded and how much AI usage it took. This is how your plan’s allowance is measured. Legal basis: our contract with you.
• Things you share with others: community hub posts, photos, programs, module requests and PCB submissions are public: anyone can read them, signed in or not. A post that links one of your projects shows a summary of its board, not the project itself. Votes are shown only as counts. Contact, kit and order requests you send us through the hub (the message, what you selected and your email address) are seen only by our team. Legal basis: our contract with you.
• Your board’s WiFi: if you give a board a WiFi network name and password, they go from your browser to the board over USB and are never sent to our servers; your browser remembers the network name. Boards that report over WiFi stream through our gateway (gateway.atech.dev) to your open project; that stream is passed on, not stored.
• Orders: name, email, phone, delivery address, what you bought, for a company order the company name, billing address and VAT number (which Stripe checks against the EU’s VAT register), and your answer to “where did you hear about us?” if you give one. Card details go straight to Stripe; we never see them. Legal basis: our contract with you, and the Danish Bookkeeping Act for keeping records. We also count each paid order in our analytics (amount, currency, country, what was bought), whether or not you accepted cookies. This uses no cookies and no name or email. Legal basis: our legitimate interest in knowing which products and pages lead to sales.
• Newsletter: your email, if you sign up. We only email when new modules land, plus a welcome email. Legal basis: your consent. Every email has an unsubscribe link.
• Emails to us: whatever you write, to answer you.
• Prices in your currency: we look up your country from your IP address to show prices in your currency. Cloudflare, which delivers our website, tells us the country; we do not store it. Legal basis: our legitimate interest in showing correct prices.
• Server logs: request details such as time, path, your user ID and IP address, and error messages. Used to run, debug and secure the service. Legal basis: our legitimate interest in a working, secure service.
• Analytics and ads: described in the next section.

We don’t sell personal data, and we don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

These services process data for us, only on our instructions and under a data processing agreement with each:

• Supabase (EU, Ireland): sign-in, sign-in emails, the database with your account and projects, and file storage
• Render (EU, Germany): hosting of the website and our servers, including server logs
• Modal (EU): firmware builds and the containers the assistant works in
• Anthropic (United States): the Claude models that design your product and write its code. They receive your prompts, chat, attachments and project files. Anthropic’s commercial terms don’t allow it to train its models on this data.
• Stripe: payments and order details
• Brevo (EU): our email lists (the newsletter) and the emails we send to them
• Cloudflare: delivers the website and protects it from attacks
• PostHog (EU): analytics
• Metricool (EU, Spain): counts visits to the website, only if you click “Accept”
• Google: “Continue with Google” sign-in, if you use it, and the Google Ads tag

Supabase, Render, Modal, Anthropic, Stripe, Cloudflare and Google are US companies, so your data may be processed in the United States. Those transfers rely on the EU-US Data Privacy Framework where the company is certified, and otherwise on the EU Standard Contractual Clauses in its data processing agreement. PostHog and Brevo keep data in the EU. We may also disclose data where the law requires it.

• Account and projects: until you delete your account. Deleting it from your account pageimmediately removes your profile, your profile picture and every project you own, with its chat, versions, work history and stored files, and shuts down the project’s workspace. If any files can’t be removed at that moment, the page tells you, and we remove them when you email us.
• What deleting your account doesn’t remove on its own: your sign-in record (email address) with our authentication provider, your community hub posts, and requests you sent us. Email us and we remove them within one month. We keep the record of AI usage (amounts, never the content) because it is our record of what we spent.
• Single projects: there is no button yet to delete one project on its own; email us the project link. Projects made without signing in were never tied to you, so we can only find them by their link.
• Orders: 5 years from the end of the financial year, as Danish bookkeeping law requires.
• Newsletter: until you unsubscribe.
• Server logs: deleted automatically by our hosting providers after their retention period.
• Analytics: up to 2 years.
• Emails to us: as long as needed to help you, then deleted.

Under the GDPR you can ask us to:

• see the data we hold about you, and get a copy;
• correct it;
• delete it;
• limit how we use it, or object to it;
• send it to you or another service in a common format;
• withdraw a consent you gave, at any time.

Your account page lets you download your account data (profile, plan and usage) and delete your account yourself. For a copy of your projects, or anything else, email [email protected]; we answer within one month. You can also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk, or the data protection authority where you live.

If we change this policy, we update the date at the top. If a change matters to you, we tell you by email.