Shopify
Shopify connection FAQ
What data flows where, what permissions Supaforce asks for, and what happens when you disconnect.
How do I connect my store?
Install Supaforce from the Shopify App Store. After install, you'll be redirected to Shopify's OAuth consent screen showing the exact scopes Supaforce is asking for. Approve and you'll land back in the Supaforce dashboard with your store connected.
If you already have a Supaforce account, you can also connect a store from Dashboard → Tools → Shopify.
What scopes does Supaforce request, and why?
Supaforce requests only the scopes needed to power the features you use. Here are the most common ones and why we ask for them:
| Scope | Why |
|---|---|
| read_products | Read your catalogue to ground content briefs and generate product schema. |
| read_themes | Detect theme type so the Visual Creator outputs assets that fit your storefront. |
| write_content | Publish blog articles directly to your Shopify blog. |
| read_content | Read existing articles to refresh them when product details or prices change. |
| write_publications | Required by Shopify for content publishing on multi-channel stores. |
| read_orders | Attribute orders back to the content or channel that drove them. |
| read_customers | Build audience signals for ad platforms (lookalike, custom) — opt-in only. |
| write_url_redirects | Create 301 redirects when product handles change so rankings carry over. |
| read_locales | Manage hreflang reciprocity across your Shopify Markets. |
| read_translations / write_translations | Publish per-locale content to your storefront. |
Connecting a store doesn't automatically grant every scope above. We only request what your active features need.
What data does Supaforce read from my store?
Only what's needed to do the job:
- Products, variants, collections, blog posts, themes, and URL redirects.
- Storefront locales and the current hreflang map.
- Orders, line items, and customer fields used for attribution (e.g. landing URL, referrer).
- Webhook events for products, inventory, orders, and subscriptions.
We do not read draft orders, draft products, or any data you mark as private. We do not sell or share this data with third parties; see the privacy policy for the full picture.
Where does my agent-written content get published?
Blog articles publish directly to your existing Shopify blog (or a blog you create during setup). Programmatic SEO pages publish as Shopify pages. Redirects write to your store's URL redirects. Metadata, structured data, and ALT text are all set through the Shopify Admin API at publish time.
Can I review content before it publishes?
Yes. Every draft requires your approval before it goes live. You'll see drafts in Slack with Approve, Revise, and Reject buttons. Approved content can be scheduled or published immediately.
You can also turn on auto-publish for trusted content types after a probation period if you'd rather not approve each piece.
What happens if I disconnect or uninstall?
If you disconnect Shopify from Tools:
- The connection record is deleted and the access token is revoked.
- Already-published articles stay on your store — Supaforce never removes them.
- Agents that depend on the Shopify connection pause publishing until you reconnect.
If you uninstall the app entirely from Shopify:
- Shopify revokes the access token immediately.
- Supaforce receives the
shop/redactwebhook 48 hours later and erases your shop and customer data from our systems within 30 days. - Your subscription pauses; no further charges are made.
How are GDPR data requests handled?
Supaforce implements Shopify's three mandatory privacy webhooks:
customers/data_request— we return any data held about the named customer to the merchant within 30 days.customers/redact— we delete or anonymise that customer's data within 30 days.shop/redact— we erase shop and customer data within 30 days of the uninstall webhook.
Details on what we retain and for how long are in the privacy policy.
Will Supaforce slow down my store?
No. Supaforce runs entirely on our infrastructure — there's no theme code, no script tag added by default, and no extension that runs on storefront page loads. The optional attribution Web Pixel uses Shopify's Web Pixels sandbox, which Shopify isolates from your storefront for performance and privacy.
Is Supaforce compatible with my Shopify plan?
All of Supaforce's SEO and content features work on every Shopify plan. Some features require specific plans:
- Shopify Markets (international SEO) — requires Markets to be enabled, which is included on Shopify and above.
- Custom Web Pixels — available on every plan.
- Theme-level changes — Supaforce doesn't modify your theme on any plan.
Still have questions?
Email support@supaforce.app or, for data-protection questions, privacy@supaforce.app.