Permissions & data
Shopify permissions
Section titled “Shopify permissions”| Access | Why |
|---|---|
| Read & write companies | Create companies, locations, contacts at approval; store credit data on them |
| Read & write customers | Invite the buyer contact; tax exemption settings |
| Read orders | Compute exposure from order events; reconciliation |
| Write checkout validations | The enforcement rule itself |
| Read catalogs & price lists | Offer the catalog choice at approval |
Transactful does not request access to your products, themes, or storefront content, and never writes to orders.
Transactful will be able to:
| View and manage companies |
| View and manage customers |
| View orders |
| Manage checkout validations |
| View catalogs and price lists |
Where data lives
Section titled “Where data lives”Application data, documents, and the credit ledger are stored in the UK/EU region, encrypted at rest and in transit. Documents live in object storage (Cloudflare R2) with access limited to your staff via the app. We are a data processor for your buyers’ personal data; you are the controller – the Privacy Policy sets this out formally.
GDPR requests
Section titled “GDPR requests”Shopify’s mandatory privacy webhooks are honoured automatically: customer data requests produce an export of what we hold about that person; customer redaction erases their personal data from applications while preserving the financial ledger in anonymized form (amounts and dates are accounting records; names and contacts are not).
Uninstalling
Section titled “Uninstalling”On uninstall: enforcement stops immediately (the validation is removed by Shopify), scheduled emails stop, and the Xero connection is severed. Your Shopify companies, catalogs, terms, and orders are untouched – they’re yours and native. Transactful’s own data (applications, documents, ledger) is retained for 30 days in case of reinstall, then permanently deleted; Shopify’s 48-hour shop-redaction webhook, if triggered, deletes it sooner. You can export applications and the ledger as CSV at any time before or during this window.