Your data, handled with purpose.

Information used by the platform

ATHR stores account and company information, membership permissions, and the tasks, notes, messages, activity records and internal inventory movements entered by authorized users. These records support company operations and access control.

After a store authorizes Shopify access, ATHR can import store identity, currency and timezone; product and variant identifiers; orders and line items; available prices, discounts and refunds; and fulfillment and tracking information. Customer names, contact fields and shipping addresses are requested only when the configured data access and Shopify approval permit them.

Why the information is used

Imported information connects orders to internal follow-up, employee tasks, customer cases, operational reports and mathematical inventory forecasts. It is not used to change the merchant’s Shopify catalog, orders, inventory, prices, customers or storefront. ATHR does not collect anonymous browsing activity using storefront scripts or pixels as part of this connection.

Importing records does not authorize marketing messages. Customer communication follows the company’s channel and consent rules. External AI processing requires a separately configured provider and the authorized data access; a missing provider is not represented as live AI processing.

Access and safeguards

Company permissions limit who can view imported data and internal work. Store credentials and background jobs are associated with the relevant company and installation. OAuth credentials are kept on the server, encrypted with the configured application key; they are not shown in the interface or stored in browser Local Storage.

Shopify supplies the connected store data. The current application is hosted on Railway. Any additional communication or AI provider must be configured separately. Do not place credentials or unnecessary personal information in free-text notes.

Disconnecting and keeping records

Disconnecting or uninstalling stops data collection for that installation. It does not automatically erase the company’s internal work. Authenticated Shopify privacy requests process the stored copies and related personal information in ATHR; they do not delete data in Shopify. Numeric inventory movements are preserved without restoring sold stock because a privacy request was received.

A customer data export is prepared for the authorized company owner to review and provide to the requester. Export downloads expire after seven days. A privacy request can require review of unlinked free text, attachments, external processors or backups; completion is not claimed solely because a webhook was received.

Browser preferences

ATHR uses necessary session cookies for sign-in and security. It saves your chosen interface language and sidebar preference in the browser. These preferences do not contain Shopify access tokens.

Contact and requests

Contact ATHR for account or company privacy questions. For purchase data, first contact the merchant whose store collected it so the request can be verified and linked to the right records.