Clear, merchant-facing privacy information for Atisam.

Overview

Atisam Labs operates Atisam - Product Reviews App. This public privacy policy explains the merchant-facing data flows involved when the app is installed, configured, and used inside Shopify.

Data used by the app

• Store-level data such as the shop domain, installed app settings, plan status, branding values, and widget configuration.
• Review records such as reviewer name, rating, title, body, uploaded media references, replies, and moderation state.
• Order and customer references used to verify buyers and send review-request emails from merchant-configured workflows.
• SMTP configuration required for merchants who choose to send review-request or reminder emails through their own email setup.
• Shopify OAuth session data required for secure admin authentication.

How data is used

• Rendering storefront widgets and customer-facing review content.
• Running review collection workflows, request scheduling, reminders, and moderation controls.
• Generating private merchant analytics inside the embedded app.
• Syncing ratings and counts to Shopify metafields where the app is configured to do so.
• Responding to merchant support requests and investigating store-specific issues.

Sharing and processors

Atisam Labs does not sell merchant or customer data. Data is shared only with Shopify, hosting and infrastructure vendors, merchant-configured email delivery systems, or legal authorities when required.

Access and deletion requests

Merchant data-access, redaction, and deletion requests are handled through the app lifecycle and Shopify privacy webhook flows. Store-specific follow-up may require verification through the merchant's Shopify account.

Retention and deletion

Data is retained while the app remains installed, subject to merchant configuration and Shopify platform rules. Uninstall events and privacy-related webhooks are processed as part of the app lifecycle.

Storefront safety

Only display-safe review data is rendered on the storefront. Admin-only metadata and operational values are not intended for public display.

Merchant responsibilities

Merchants are responsible for the customer-facing text, email content, incentive rules, and moderation decisions they configure inside the app. Privacy disclosures presented to end customers should remain consistent with those settings.