Privacy Policy — Profit Leak Audit

Last updated: 14 August 2026

Profit Leak Audit is a Shopify app operated by ATA MANSOUR ATA, trading as ATAKEEP. It reads a merchant's product catalog, reports data problems that cost the merchant money, and — only when the merchant asks it to — writes corrections back.

The short version

Profit Leak Audit does not access, receive, or store any customer data. It never requests access to orders or customers, and it holds no names, addresses, email addresses, phone numbers, or payment information belonging to any shopper. Under Shopify's protected customer data framework it is Level 0: it requests no protected customer data fields at all.

What the app can access

The app requests exactly two Shopify access scopes:

• write_products — to read every product and variant in order to audit it, and to write the corrections a merchant explicitly approves.
• read_inventory — to read variant weights and whether an item requires shipping, which is the check for products that ship with no weight set.

No other scope is requested. Removing either one would break a stated feature.

What we store

• Your store's Shopify domain, to know which store a scan belongs to.
• A Shopify access token, to call the Shopify API on your behalf. It expires and refreshes automatically.
• Scan results: counts per check, plus the Shopify IDs and titles of affected products, so the app can act on them.
• Correction history: for each change, the product and the field value before and after, so the change can be undone and so you can see what the app has done.

That is the complete list. We store product data belonging to your business. We do not store data belonging to your customers, because we never receive any.

What we do not do

• We do not sell, rent, or share your data with anyone for marketing.
• We do not use your catalog to train machine learning models.
• We do not read your orders, customers, checkout, or storefront traffic.
• We do not write to your catalog without a preview you saw and a button you pressed, and every change can be reversed from inside the app.

Deleting your data

Uninstalling the app deletes everything. Removal is immediate and complete: deleting the record of your store removes its scans, findings and correction history with it. There is no separate request to make and nothing is retained for analytics.

We also implement Shopify's three mandatory privacy webhooks.shop/redact erases a store's data when Shopify asks, 48 hours after uninstall. customers/redact and customers/data_request are implemented and verified, and have nothing to erase or return, because we hold no customer data.

Where your data is held

Product and scan data is stored in a PostgreSQL database hosted by Neon in US East (Virginia). Application servers are hosted by Railway in the same region. Both act as our sub-processors. Data is encrypted in transit (TLS) and at rest.

Changes to this policy

If what the app collects ever changes, this page changes with it and the date at the top moves.

Contact

ATA MANSOUR ATA, trading as ATAKEEP
Princess Haya Circle, Aqaba 77110, Jordan
atakeep@gmail.com