What we read
Just the useful order facts.
- Paid order reference, amount and currency
- Fulfilment state and carrier
- Refund amount and state
- Signed Shopify delivery ID and event time
BuyerProtection for Shopify · read only
When the charge looks strange, open the Shopify order.
Paid, fulfilled and refunded beside the statement name—before support hunts screenshots.
Read-only orders + fulfilments · no order edits · no customer export
The awkward moment
A familiar order can still look like a strange payment.
BuyerProtection keeps the useful events as they happen. No rebuilding the story after a dispute starts.
What we do not read
Customer personal details stay out.
- No buyer name, email, phone or address
- No card or payment credential
- No product names or raw tracking number
- No raw webhook body
Who stays in control?
You approve it. You can remove it.
- Managed installationShopify presents the exact read-only scope before access is issued.
- Signed deliveriesInvalid HMAC, unknown store or repeated webhook ID stops before evidence is applied.
- Immediate revocationUninstall or merchant revocation removes the stored access token.
- Privacy erasureShop redaction physically removes its source events, descriptor and connection identity.
Merchant-controlled connection
Connect Shopify before the first screenshot arrives.
The app proves the source exists. It does not make the store Guaranteed. That still has to be earned.