Permissions and data access

Sami Product Labels requests only the Shopify permissions it needs. This page covers each permission, the webhooks the app subscribes to, and how your store data is used.

Required permissions

Permission	What it’s used for
read_products	Access product data (title, type, vendor, tags, price, inventory, variants, collections, metafields) to evaluate targeting rules and render badges on the storefront.
read_themes	Check whether the app’s App Embed block is enabled in your theme, so the app can prompt you to enable it if needed.
read_files / write_files	Upload and manage badge images (including AI-generated images) through Shopify’s file system.

Note

Sami Product Labels does not request a customer-data permission (read_customers). Customer-based targeting — login status, customer tags, order history — is evaluated from your storefront’s own customer context at render time, not via Shopify’s customer data API.

Webhooks

The app subscribes to these Shopify webhooks:

Webhook	Purpose
app/uninstalled	Triggers cleanup of your stored badge, label, and analytics data when you uninstall the app.
orders/create	Attributes completed orders to the badges displayed on their products, to power the Analytics dashboard.
customers/redact, shop/redact, customers/data_request	Shopify’s mandatory GDPR compliance webhooks. Since the app does not store customer personal information, these are handled as no-op acknowledgements.

Data handling

What data we store

• Badge, label, badge group, trust badge, highlight, and banner configurations — the settings, styles, targeting rules, and content you create.
• Image assets — badge images you upload or generate with AI, stored through Shopify’s file system.
• Analytics events — aggregate add-to-cart and order events linked to badge displays, for the analytics dashboard (DIAMOND plan).

What data we access

• Product catalog data — product titles, types, vendors, tags, prices, inventory levels, variants, and metafields to evaluate targeting rules.
• Theme structure — to check App Embed status and ensure proper integration.
• Shopify Sidekick — when you ask Sidekick about the app, it reads your own store’s badge, group, Extra Features, discount, and analytics data through your signed-in admin session. Sidekick cannot change that data.
• Storefront metafields — the app writes your badge, label, and trust badge configurations to shop metafields (namespace SamitaLabels) so your theme’s App Embed block can render them without extra requests.

What we do NOT store

• Customer personal information — no names, emails, addresses, or phone numbers.
• Payment details — no credit card numbers, billing information, or payment methods.
• Order specifics — beyond aggregate analytics counts, no individual order details are retained.

Caution

Data is processed under Shopify’s data protection requirements. Uninstalling removes your stored configurations and analytics data per Shopify’s mandatory deletion policies.

Privacy and terms

• Privacy Policy
• Terms and Conditions

For any questions about data handling or permissions, contact us at support@samita.io.

---

Next steps

• How it works — understand how the app delivers badges to your storefront.
• FAQ — answers to common questions about the app.