Supabase
Database, authentication and file storage for every house
European Union
Home
Trust
Reading how the service is behaving…
A tailoring house trusts us with its clients, its measurements and its money. This page lays out, in plain words, everything that bears on whether that trust is well placed — checked live, not written once and forgotten.
How the service is behaving
100.00% up over the last 30 days — the promise was kept. 100.00% up over the last 90 days — the promise was kept.
Every outage is written down, every promise of an answer is kept in numbers, and a missed month costs us part of the fee. The full standing page keeps the running account.
Your house is your own
Every record carries the name of the house it belongs to, and the doors between houses are enforced by the database itself — not by care taken in the code. One house can never read, change or export another's clients, measurements, cloth or money, and that rule is re-tested on every change to the software. Staff see only what their own house's standing allows, and anything sensitive needs the house's own sign-in — never a shared back door.
How the records are kept safe answers the questions a careful buyer asks, and what your clients can rely on sets out the discretion rules in plain words.
Four promises, in plain words
- Your clients are yours. The house owns every client record, measurement and pattern. AtelierSuite will never contact, market to or claim your patrons.
- No robot speaks to your clients. Every email, reminder and reply the suite prepares waits as a draft until a person in the house presses Send.
- Nothing precious can be lost by a slip. A client's file and their measurements can only be put away by the head of house, and anything put away can be brought back for 30 days.
- Makers never see your prices. An outworker's page shows the piece, the cloth and the date wanted back — never what the client paid or how to reach them. The house can open that page and see it exactly as the maker does.
Who ever touches the data
The house's records pass through as few hands as possible. These are all of them, and what each is for. This list is part of the data processing agreement.
Cloudflare
Serving the application, protecting it from abuse and running its server functions
Global edge network
Stripe
Card payments and invoice settlement; Stripe is the card processor
EU / US (standard contractual clauses)
Resend
Sending house email — invoices, appointment notes, reminders
EU / US (standard contractual clauses)
Model gateway (Google, OpenAI models)
The house and client assistants, speech, dictation tidying, image generation and the reading of photographs or scanned paper (there is no separate OCR vendor); prompts are not used to train models
EU / US (standard contractual clauses)
GoCardless, TrueLayer
Bank-transfer requests and statement matching, where a house switches bank settlement on. They see the payer's name, the amount and the reference — never a card number
United Kingdom / European Union
Revolut, Monzo (open banking)
Optional bank connections a house may authorise so incoming transfers can be reconciled against its invoices
United Kingdom / European Union
Spotify, Instagram
Optional connections a house may switch on for music and posting
EU / US (standard contractual clauses)
Public websites opened through Research
Supplying current public information when a house deliberately uses Research. The selected website receives the search or page request, so personal or confidential details should not be included
The website's own location, which may be outside the United Kingdom
How long anything is kept
Client files, measurements, photographs and specifications
So a garment can be remade or altered years later
7 years after the last commission
Invoices, payments and receipts
HMRC record-keeping
7 years
Messages and appointment notes
Part of the client's record
7 years after the last commission
Assistant conversations and usage
Support and cost review only
12 months
Records put away (soft deleted)
Recovery from mistakes
30 days, then permanently removed
Access and change logs
Security and accountability
24 months
Cookie and consent records
Evidence of consent
24 months
Encrypted offline copies and pending changes
Continuity while a trusted device has no connection
Until synchronised or sign-out; stale queued work is automatically expired
Contact and sales enquiries
To answer the enquiry and keep an accurate relationship record
24 months after the last contact
The paperwork
Every document carries its version and the day it took force, and the change log is public. AtelierSuite Some registration details are being finalised; the documents are marked accordingly while a solicitor reviews them.
Something here not answered, or something you need in writing for your own records? Ask us directly — a person answers.