Privacy Policy

This policy covers the AtlasAQ website (atlasaq.com), the AtlasAQ application, and our marketing and outreach activities. Cookies are covered in Section 12.

AtlasAQ is operated by LaunchSoft Solutions LLC, based in Dubai, United Arab Emirates. For any privacy request, contact us at the email above.

We do not use email-open tracking, and click tracking is off during our current pilot.

To provide and operate the service; for billing; for product improvement in aggregate; for relevant business-to-business marketing and outreach (see Sections 5 and 11); and for security, fraud prevention, and legal compliance.

We rely on: performance of a contract (to provide the service); legitimate interests (product improvement and relevant B2B outreach); consent where required; and legal obligation. This is applied consistently with the UAE Personal Data Protection Law and, where applicable, the GDPR.

We share data only with service providers under contract, and we do not sell personal data. Our providers include hosting and infrastructure (Railway, Vercel), database and authentication (Supabase, with row-level security), queue and cache (Upstash Redis), search (Meilisearch), a third-party payment processor, privacy-friendly analytics (Plausible, cookieless), transactional email (Resend), an email outreach platform (Smartlead), and an email-verification provider.

We use Resend to send transactional email, including contact-form notifications and service-related messages. Resend processes email addresses, message content, and delivery metadata solely as needed to provide these email services. We do not use Resend for newsletters or marketing email, and we do not sell your data.

If you install the AtlasAQ app on your Shopify store, we receive and store the following from Shopify: your store's myshopify domain; an access token, which we hold encrypted and never in plain text; the permission scopes you granted at install; and the times of installation, connection and uninstallation. If you connect the store to an AtlasAQ account, we also store the link between that store and your AtlasAQ account.

The app requests one permission only: write access to products. It does not request, receive or store your Shopify customer data, order data, or payment data. It creates products in your store as drafts and never publishes them, edits existing products, or reads your storefront.

Installing and authorising a Shopify app is an action taken by a store owner or staff member, and Shopify may make information about that person — such as their name or email address — available to the app during installation or support. Where we receive such information it is personal data, it is handled under this policy, and we use it only to operate and support the integration.

If you uninstall the app, Shopify notifies us and we destroy the stored access token. We keep the record of the store and its AtlasAQ account link so that reinstalling does not require you to reconnect, unless you ask us to delete it. We also support Shopify's mandatory privacy requests: on a shop-deletion request we delete our records for that store, and because we hold no Shopify customer data, a customer data or erasure request returns no customer information.

If you install the AtlasAQ app on your Salla store, we receive and store the following from Salla: your store's Salla store identifier; an access token and a refresh token, both of which we hold encrypted and never in plain text; the permission scopes granted at install; the token expiry times; and the times of installation, authorisation and uninstallation. If you connect the store to an AtlasAQ account, we also store the link between that store and your AtlasAQ account.

The app asks Salla for three permissions: write access to products, read and write access to webhooks, and offline access so your session can be renewed without asking you to reinstall. Salla additionally grants read access to basic store settings, which the app does not use. It does not request, receive or store your Salla customer data, cart data, order data or payment data. AtlasAQ does not modify your existing Salla products without an explicit merchant-authorized action, and it does not automatically publish products for sale.

Installing and authorising a Salla app is an action taken by a store owner or staff member, and Salla may make information about that person available to the app during installation, when the app is opened inside the Salla dashboard, or during support. Where we receive such information it is personal data, it is handled under this policy, and we use it only to operate and support the integration.

When you open AtlasAQ inside your Salla dashboard, Salla provides a short-lived token identifying the store and the signed-in user. We send that token to Salla to verify it, use the result once to establish a session, and do not store it, log it, or include it in any analytics or error reporting.

If you uninstall the app, Salla notifies us and we destroy the stored access and refresh tokens. We keep the record of the store and its AtlasAQ account link so that reinstalling does not require you to reconnect, unless you ask us to delete it.

Your data may be processed outside your country (including the UAE, EU, and US). We apply appropriate safeguards for such transfers as required by applicable law.

We retain account data for the life of your account and for a reasonable period afterward as required by law. Suppression-list entries are retained as needed to honor opt-out requests.

Subject to applicable law, you may request access, correction, deletion, restriction, portability, objection, or withdrawal of consent. Contact us at the email above; we aim to respond within 30 days. You may also complain to the relevant supervisory authority or the UAE Data Office.

Every marketing email includes a working one-click opt-out, honored within 48 hours. We maintain a central suppression list, and opted-out contacts are not re-contacted. Our marketing emails include a physical mailing address. We verify addresses before sending and do not purchase low-quality mass lists.

We use essential cookies for login and session management. We do not run email-open tracking, and we do not use third-party advertising cookies.

We apply row-level security on our database, encryption in transit, and access controls. No system is perfectly secure, and we cannot guarantee absolute security.

The service is for business users aged 18 or older. It is not directed to children, and we do not knowingly collect children's data.

We post updates here with a new effective date. We will notify you of material changes by email or in-app notice.

LaunchSoft Solutions LLC · Ahmad.Abbas@launch-soft.com · Dubai, United Arab Emirates.