Privacy & data
Protected Customer Data
Basket Boost is a Level 1 app. It reads only what it needs to find which products are bought together — and nothing about who bought them.
What we access
Order line items — the product ids (and quantities) in each order, within a configurable lookback window. We use these to compute which products co-occur in baskets.
Products (read & write) — we read titles, handles, images and price so the dashboard and the storefront block can show product names instead of raw ids, and we write ONE app-owned product metafield (basketboost.fbt) holding each product’s recommended complements, which the theme block reads. We never edit your product content, price or inventory.
Scopes: read_orders, read_products, write_products. That is the complete list — no customer, fulfillment, or financial scopes.
What we never access
No customer PII of any kind: no names, emails, phone numbers, shipping or billing addresses, IP addresses, or payment details. The baskets handed to the mining engine are product-id arrays only — they cannot identify a customer.
Retention & deletion
We store only the mined statistics (pairs, recommendations, counts) and a product-title mirror. On uninstall we mark the shop inactive; on Shopify’s shop/redact webhook we delete all of the shop’s rows. The customers/data_request and customers/redactwebhooks are answered truthfully: we hold no customer data to return or erase.