Privacy policy

ATA PROJECT (“ATA”, “we”) is an e-commerce studio in Cairo, Egypt. We build Shopify stores and run automations, such as WhatsApp order confirmation, for online stores (“clients”). This policy explains what data we handle, why, and what you can do about it.

Who this covers

• Clients: store owners and their team who use our website, portal and automations.
• Shoppers: people who order from our clients’ stores and receive WhatsApp messages sent on the client’s behalf.

What we collect

• Client account data: name, brand, email, phone, store link, invoices and payment records.
• Connected accounts: when a client connects Shopify or WhatsApp, we store access tokens (encrypted) and IDs such as the store domain, WhatsApp Business Account ID and phone number ID.
• Order data from Shopify: order number, items, total, payment method, the shopper’s name and phone number, and shipping/tracking status.
• WhatsApp messages: messages sent to and from the client’s WhatsApp Business number through our service, delivery statuses, and, if the client connects their WhatsApp Business app, the contacts and chat history Meta shares with us.
• Reviews: ratings and comments shoppers leave on our order pages.

Why we use it

• To send order confirmations, reminders, shipping updates and review requests for the client, and to update the order in the client’s Shopify store.
• To show the client their orders, chats and results in their dashboard.
• To bill clients and provide support.
• To keep the service secure and working.

We do not sell personal data, and we do not use shoppers’ data for our own marketing or to train AI models.

Who we share it with

• Meta (WhatsApp), to send and receive WhatsApp messages.
• Shopify, to read and update the client’s orders.
• Hosting and email providers that run our service, under confidentiality terms.
• Authorities, only when the law requires it.

Roles

For shoppers’ data, the client (the store) decides why it is processed, and ATA processes it on the client’s behalf. Shoppers can ask the store, or us, to access or delete their data.

How long we keep it

Order and message records are kept while the client’s account is active and for up to 12 months after, unless the client asks us to delete them sooner. Billing records are kept as long as the law requires.

Security

Tokens are encrypted at rest, traffic is encrypted in transit, and every webhook we receive from Meta and Shopify is checked for a valid signature.

Your choices

• Reply “stop” to any message, or ask the store, and you won’t get further automated messages from it.
• Ask for a copy of your data, a correction, or deletion. See data deletion.
• Clients can disconnect Shopify or WhatsApp at any time.

Contact

Email ataprojject@gmail.com. ATA PROJECT, Cairo, Egypt.