Shopify integration

A merchant connects their store and sees what it actually earns: each order's revenue minus refunds, Shopify Payments fees, shipping and cost of goods — as a profit figure per order, per product and per day, next to stock levels and restock warnings. Merchants who also sell on Amazon, eBay, OTTO or Kaufland see every channel in the same reporting, but Shopify works on its own.

• read_orders — order amounts, line items, discounts and shipping — the revenue side of every profit figure.
• read_returns — refunds and returns, so a sale that came back is not counted as profit.
• read_products — products and variants, to attribute each sale to a SKU and its cost.
• read_inventory — stock levels, for restock warnings and per-SKU margin.
• read_fulfillments — fulfilment status, so shipping is attributed to the order that caused it.
• read_reports — store-level reporting figures used for reconciliation.
• read_shopify_payments_accounts, read_shopify_payments_payouts — actual processing fees and settlement payouts. Without them the fees in the profit calculation would be estimates rather than the amounts Shopify really charged.

Every scope is read-only. Sellergoo holds no write access to a Shopify store: it cannot change a product, a price, an inventory level or an order.

• We do not create, edit or delete anything in the store — the integration is read-only.
• We do not store customer personal data. Names, e-mail addresses, postal addresses and phone numbers in an order are not written to our database; we keep amounts, SKUs, quantities and dates.
• We do not contact buyers, and we do not run marketing of any kind.
• We do not sell, share or aggregate merchant data. Nothing derived from one store is shown to another.

For Shopify's protected customer data programme we request level 1 (order data) only, and none of the level 2 personal-data fields.

The merchant authorises the app through Shopify's OAuth flow. Sellergoo uses expiring offline tokens: an access token valid for about an hour, refreshed from a rotating refresh token, both encrypted at rest. Uninstalling the app revokes access immediately — the uninstall webhook deletes the stored authorisation and disconnects the store.

Orders, refunds and stock changes arrive as Shopify webhooks, so figures update as events happen rather than on a fixed schedule. The three mandatory privacy webhooks (customer data request, customer redaction, shop redaction) are implemented and verify every request's HMAC signature.

• Hosted on our own server in Frankfurt, Germany (EU). Data is not transferred outside the EU for processing.
• Every customer has a physically separate database file — isolation is a different file per tenant, not a query filter that could be forgotten.
• OAuth tokens are encrypted with AES-256-GCM; the key lives in the server environment.
• Data is retained while the connection is active and deleted on uninstall or on request, as set out in the privacy policy.

Support and API questions: [email protected] · support page. See also the privacy policy, terms of service and Impressum.