Terms and Conditions

Last updated: November 5, 2026

These terms govern the use of Atelier201 (the website, the dashboard, the API, the MCP server and the CLI). Atelier201 is operated by Guillaume Duvernay, Unternehmensberatung für digitale Transformation, Richard-Sorge-Straße, 10249 Berlin, Germany (“we”, “us”). Contact: hi@atelier201.com.

1. The service

Atelier201 hosts websites built as Astro projects. You can create sites, change their content yourself or through an AI agent or the assistant, build them, share previews, publish them on an Atelier201 address or on your own domain, and export the whole project at any time.

2. Your account

You need an account, with a verified email address, to use the dashboard. Keep your password, API keys and agent connections secret: actions taken with them count as yours. An agent you connect acts with the permissions you grant it, and nothing is published without an action of a workspace admin.

3. Your content

What you put in Atelier201 (texts, images, code, domains) stays yours. You give us the rights we need to store it, build it, and serve your published sites to their visitors, for as long as you use the service. You are responsible for your sites, including the personal data they collect and the rights to what they show.

You may not use Atelier201 to publish content that is illegal, that infringes the rights of others, that deceives visitors (phishing, impersonation, malware), that sends spam, or that interferes with other sites hosted on Atelier201 or with their visitors (for example by setting cookies for them or tracking visitors across them). We may take down a site or suspend an account that breaks this rule; where the law allows, we tell you first and give you the chance to fix it.

We host your sites; we do not review them by hand before they go live. To detect this kind of abuse, automated checks, including an AI model, read what a build’s scripts, forms and embeds do. When they raise a doubt, that version may wait for a person on our side before it can be published or shared, and we get back to you; a person decides, and you can write to us about any decision. Anyone can report a site they believe is illegal to hi@atelier201.com, with its address and the reason. We look at every report, act quickly when the content is illegal, and tell the site’s owner what we did and why.

4. What you add to your sites

You choose what your sites load from other services: forms, booking and payment widgets, chat, analytics, videos, maps, fonts, pixels, or any code you or your agent add. Those services are provided by third parties under their own terms, and they may receive your visitors’ data directly from your visitors’ browsers. We do not control them and are not responsible for them, for their availability, or for what they do with that data.

You are responsible for your sites’ compliance with the law, in particular for a privacy notice, a legal notice where one is required, and the consent of your visitors where a service needs it (for example a cookie banner). We may provide tools that help; using them does not shift that responsibility to us.

If you use Atelier201 for your business, you will indemnify us against claims of third parties, including fines and reasonable legal costs, that arise because your site’s content or the services you added to it break the law or the rights of others, unless you are not responsible for the breach. Tell us promptly about such a claim and let us take part in the defence.

For the personal data of your sites’ visitors and the personal data in your sites’ content, you are the controller and we are your processor. The data processing agreement at the end of these terms applies, and forms part of them.

5. Plans and payment

Each site has its own plan. A draft costs nothing: it can be created, edited and shared through preview links, but not published, and a workspace can hold 10 drafts (25 once it has paid for a Site or credits). Publishing a site requires the paid plan (Site), billed monthly or yearly per site, in advance, through Stripe, at the prices shown on the pricing page, excluding VAT. Changing a plan takes effect at once and is prorated. When a Site’s plan ends, at the end of the paid period, the site goes offline; its draft and history are kept. A Site includes monthly AI credits for the assistant. A workspace can also buy optional credits, in any amount from the minimum shown on the pricing page. Credits that are not used expire.

6. AI features

The assistant and agents can make mistakes. Review what they change before you publish: a preview shows exactly what will go live.

7. Availability and changes

We work to keep Atelier201 available and your data safe, but we cannot promise that the service will never be interrupted. We may change the service; if a change takes away something you pay for, we tell you in advance and you may cancel.

8. Ending

You can export your sites and delete your account at any time. We may end the service for an account that breaks these terms, after notice where the law allows. If we stop Atelier201 altogether, we give at least 60 days’ notice so you can export your sites.

9. Liability

We are liable without limit for intent, gross negligence, and injury to life, body or health. For slight negligence we are liable only for breaches of essential obligations, limited to the damage typical and foreseeable for this kind of contract. Liability under the German Product Liability Act is unaffected. Otherwise, we are not liable, in particular not for third-party services you add to your sites (section 4) or for content we host on your behalf without knowing it is illegal.

10. Law

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a consumer, the mandatory protections of the country where you live still apply. For businesses, the courts of Berlin have jurisdiction.

11. Changes to these terms

We may update these terms. We announce significant changes by email at least 30 days before they apply; if you keep using Atelier201 after that, the new terms apply.

Annex: data processing agreement

This agreement applies under Article 28 of the GDPR whenever we process personal data on behalf of a customer (“you”, the controller) through Atelier201 (“we”, the processor).

Subject matter and duration. Hosting, building, previewing, serving and measuring the audience of your sites, and running the assistant and agents you use on them, for as long as your account exists and until the data is deleted as below.

Data and people concerned. The visitors of your sites: IP address and browser information (read to serve each request and to compute a daily visitor hash, then dropped), the hash, page, country, referring site, device and browser family. Anyone named or shown in your sites’ content: what you put there (names, photos, contact details, texts). Form submissions and data sent to services you embed go from the visitor’s browser to the address or service you chose; they do not pass through us.

Instructions. We process this data only to provide Atelier201 as described in these terms and in the documentation, and on your documented instructions, which are these terms and your use of the service. We tell you if we believe an instruction breaks the law. We do not use this data for our own purposes, except to secure and operate the service.

Confidentiality and security. People who can access the data are bound to confidentiality. We apply the measures described in our privacy policy and in particular: encrypted transport (HTTPS), isolated build containers without network access, separation of customers’ data in code and in the database, hashed credentials, access to production systems limited to the operator, and logs kept no longer than 30 days.

Sub-processors. You authorise the sub-processors listed in our privacy policy for the data they handle (for sites: Cloudflare, Inc., hosting and network, and TypeSafe AI, Inc., through Cloudflare, for the automated checks of a build’s code; for the assistant: OpenRouter, Inc. and the model provider it routes to, only when you use it). We bind each to data-protection obligations equivalent to these, and remain responsible for them. We announce a new sub-processor on the privacy policy and by email at least 30 days before it starts; you may object for a legitimate reason, and if we cannot address the objection you may end the affected service. Transfers outside the EEA rely on the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

Helping you. We help you, as far as the service allows, answer your visitors’ requests to exercise their rights, and meet your obligations on security, breach notification, impact assessments and prior consultation. Most of it you can do yourself in the dashboard (editing or deleting content, turning visitor counting off).

Breaches. We tell you without undue delay after becoming aware of a personal data breach affecting your data, with the information we have.

Deletion. When you delete a site or your account, we delete the related data as described in our privacy policy, except what the law requires us to keep. You can export your sites before that at any time.

Audits. We make available the information needed to show compliance with this agreement and allow audits by you or an auditor you mandate, bound to confidentiality, with reasonable notice, at your cost, at most once a year unless a breach or an authority requires more.

If this annex and the rest of these terms disagree on personal data processed on your behalf, this annex prevails.