Shopify scopes
read_products is required. It supports catalog totals, active-SKU audits, product context, and the product and variant facts documented in Scan and Improve.
write_products is optional. It is requested only when a merchant chooses to publish an approved product description or app-owned FAQ metafield. Before values are saved, Shopify is re-read after writing, and Undo is supported.
The app does not request customer, order, checkout, payment, POS, theme-write, fulfillment, shipping, marketing, or protected customer-data scopes.
AI-provider inputs
AI Visibility checks can send a buyer question, merchant or brand name, known public store domains, target markets, and result-parsing instructions to OpenAI, Perplexity, Google Gemini, and Anthropic Claude.
Product content generation can send known Shopify product facts, merchant-entered buyer details, and relevant buyer-question context to OpenAI. Shopify access tokens, app secrets, customer data, order data, checkout data, payment data, and private theme files are not sent to AI providers.
Shop-scoped records
Server-side MongoDB records can include installation sessions, brand and market context, catalog audits, drafts, backups, buyer-question versions, provider jobs and answers, citations, competitor decisions, verification history, billing entitlement, usage, and operational idempotency records.
Webhooks and deletion
Shopify-signed webhooks include app uninstall, scope update, customer data request, customer redact, and shop redact. Customer privacy webhooks are verified no-ops because the app does not store Shopify customer records. Verified uninstall and shop-redact events delete sessions and shop-scoped application records.
Visible history windows are seven days for Free, 180 days for Pro, and 365 days for Growth. These user-visible windows are not presented as separate physical database destruction schedules.
Existing controls
Controls include HTTPS, Shopify OAuth, authenticated embedded requests, signed webhook verification, server-side shop scoping, unique indexes and idempotency keys, server-side plan enforcement, protected environment variables, Before backup, write conflict checks, post-write re-read, Undo, and explicit provider-failure records.
SkuWatch does not claim SOC 2, ISO 27001, HIPAA, PCI DSS, or another independent certification unless a verifiable certification is published.