Privacy policy

Last updated 15 October 2026

ATS: Loyalty Program Rewards lets Shopify merchants reward their customers with points for orders, which customers exchange for discount codes. It is operated by Ameer Ibrahim, based in Iraq (“we”). This policy explains what the app collects when a merchant installs it, why, and how to have it deleted.

What we collect

About the merchant’s store:

• the store’s myshopify.com domain
• the access token Shopify issues when the app is installed
• the program settings and rewards the merchant sets up
• which staff account opened a customer’s details in the app, and when, kept for one year for security

About the store’s customers:

• their Shopify customer ID, name and email address
• their points balance and history, including the order number and Shopify order ID of each order that earned points
• the discount codes they redeem points for

We don’t store payment details, addresses, phone numbers or what an order contained.

How we use it

Only to run the program: awarding points for orders, showing customers their balance on the store, showing merchants their customers’ points, creating discount codes when customers redeem points, and counting the orders that earned points against the merchant’s plan. We don’t sell this data, use it for advertising or share it beyond the services below.

Who else handles it

• Shopify, where the data comes from and where discount codes are created.
• Vercel, which hosts the app.
• Turso, which hosts the app’s database.

They process the data only to provide their service to us.

When a store uninstalls

We keep a store’s data while the app is installed. Forty-eight hours after a merchant uninstalls it, Shopify asks us to delete that store’s data, and we delete it then, unless the merchant has installed the app again by that time.

Requests about your data

For customer data the merchant is in control, and we act on their behalf. Customers can ask the store they shop with to see or delete their data. Shopify passes those requests to us, and we answer them: a deletion request removes that customer’s details and points history.

Merchants, and anyone else with a question about this policy, can email ameer.programmer@gmail.com.

Changes

If this policy changes, we’ll update it here and change the date at the top.