> For the complete documentation index, see [llms.txt](https://docs.globo.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.globo.io/globo-b2b-bulk-order/reference/permissions-and-data.md). # Permissions & data The Shopify permissions Globo B2B Bulk Order requests, the data it keeps, what it sends to AI, and what happens to your data when you uninstall. This page lists what Globo B2B Bulk Order can access in your store, what it stores, what it shares with other services, and when your data is deleted. Use it to answer questions from your team, or when you update your own store's privacy policy. ## At a glance * **View-only permissions.** The app asks only for permission to view data. It can't change your products, prices, customers, orders or theme files. * **No buyer personal data in the app's database.** For the Dashboard, the app keeps only order IDs, totals, currencies, dates and which tool added the items. * **Order files aren't kept.** Files buyers upload to a Quick Order form are read, then discarded. * **AI in two places only:** reading image and some PDF order files, and **Auto-translate**. * **Uninstalling deletes your data right away.** ## Permissions the app requests Shopify lists these permissions when you install the app. The app needs all of them; there are no optional permissions. | Permission | Shopify scope | Why Globo B2B Bulk Order needs it | | ---------------------------------- | ---------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | View products | `read_products` | In the app: the product and collection pickers, product tags and form previews. On the storefront: when a buyer pastes or uploads SKUs or barcodes, the app looks up which of the form's products carry them, so matching is fast. | | View customers | `read_customers` | In the app: lists your customer tags for **Include customer tags** and **Exclude customer tags**. It reads tags only. In customer accounts: checks whether a B2B buyer is a location admin, for order CSV downloads. | | View orders | `read_orders` | The Dashboard numbers, which count orders that include items added with the app. Order CSV downloads: reads the order's items when a buyer clicks **Download CSV**. | | View online store pages | `read_content` | Lets you pick specific pages of your online store under **Landing page** in a Quick Order form's **Display location**. It reads page titles and handles only. | | View store languages | `read_locales` | Lists your store's languages in **Settings** > **Translations**. | | View themes | `read_themes` | Finds your published theme, so the Variant Table and Collection Quick Order are placed correctly for it, and notices when you publish a different theme. | | Read products on the storefront | `unauthenticated_read_product_listings` | The Quick Order form and Collection Quick Order load products, variants, prices and collections from Shopify in the buyer's browser. The app creates a storefront access key for your store for this. | | Read inventory on the storefront | `unauthenticated_read_product_inventory` | Stock labels, for example **Only 3 left**, and limiting quantities to the stock available. | | Read metaobjects on the storefront | `unauthenticated_read_metaobjects` | Requested together with the storefront permissions above. No current feature uses it. | ### Notifications the app receives from Shopify The app checks Shopify's signature on every notification before it acts on it. | Notification | What the app does | | ---------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | An order is created | Checks whether the order includes items added with the app. If it does, the app records the order for the Dashboard (see [What the app stores](#what-the-app-stores)). It ignores all other orders. | | A theme is published | Notes your new live theme, so placement settings follow it. | | The app is uninstalled | Deletes your store's data. See [Uninstall and data deletion](#uninstall-and-data-deletion). | | Privacy requests | See [Privacy requests (GDPR)](#privacy-requests-gdpr). | ## What the app stores | Data | What it includes | Kept until | | --------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------ | | **Store details** | Your store's domain and Shopify store ID, store name, store email, owner name, Shopify plan, currency and money format, time zone and country. Also your app settings (stock thresholds, toast, order export), the app language and which theme is live. | Refreshed each time you open the app. Deleted when you uninstall. | | **Access keys** | The keys the app uses to work with your store through Shopify. They're stored encrypted. | You uninstall | | **Your tools** | Each Quick Order form, Variant Table and Collection Quick Order: its name, status and settings, the products, collections and pages you picked, and the product tags and customer tags in its rules. | You delete it, or uninstall | | **Translations** | Your storefront wording for each language. | You delete the language, or uninstall. English can't be deleted. | | **Auto-translate history** | For each run: the language, its progress, the English wording sent and the translations returned. | You uninstall | | **Dashboard order records** | For orders that include items added with the app only: the Shopify order ID, which tool added the items, the order total, the currency and the order date. No customer names, emails, addresses or line items. | You uninstall | | **Monthly AI usage** | How many AI tokens and requests **Auto-translate** used each month, by store domain. No content. | Kept after you uninstall (see [Uninstall and data deletion](#uninstall-and-data-deletion)) | What the app doesn't store: | Data | What happens to it | | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **Uploaded order files** | CSV and Excel files never leave the buyer's browser. Images and PDFs are read on the app's server while the buyer waits, then discarded. The app doesn't record who uploaded a file. | | **Order CSV files** | Built from Shopify each time a buyer downloads one. Never saved. | | **Contact us messages** | Emailed to the Globo support team. They aren't saved in the app. | The app also reads some data without keeping it: product and collection details for pickers and previews, page titles, your store's language list, and your customer tags. Of your customer tags, the app keeps only the ones you add to a rule. ## What the app saves in your Shopify store The app has no permission to edit your store data, but it does save a few things of its own: * **Your published settings.** The settings of your **Active** tools, your published languages, your stock threshold and toast settings, and the placement settings for your theme are saved on your store as shop metafields. Your storefront reads them from there. Their definitions have names that start with **\[Do not edit]**. * **A storefront access key**, so the tools can load product data from Shopify. * **On carts and orders:** * a hidden mark on each cart line added with the app, so the app can count the order on the Dashboard * when a buyer enters a number in **PO / Order # (optional)** in the Quick Order review: a `Customer PO #` field on the cart (shown under **Additional details** on the order) and a line `Customer PO #: …` in the cart note. Both stay on the order. {% hint style="warning" %} Don't edit or delete the shop metafields whose names start with **\[Do not edit]**. Your tools can stop showing correctly. If you changed one by mistake, open Globo B2B Bulk Order: each time you open it, the app publishes all your settings again. {% endhint %} ## What the storefront reads about buyers When a buyer is logged in, the app embed adds two things about them to the page: their customer ID and their customer tags. Nothing else: no name, email or address. The tools need this for **Who can see this form?**: * **Logged-in customers only** and **Guest customers only** need to know whether the buyer is logged in. * **Customers with tags**, with **Include customer tags** and **Exclude customer tags**, needs the buyer's tags. Good to know: * Showing or hiding a tool happens in the buyer's browser. The app's servers aren't involved. * The storefront script doesn't set cookies or save anything in the buyer's browser. * On product pages, the app embed adds the product's variant data to the page, including SKU, barcode, price and stock quantity, for the Variant Table and the stock labels. * When a buyer uploads an order file or pastes a SKU list, the request goes to the app's server through your store's own domain. Shopify signs each of these requests and, as it does for every app, adds the logged-in buyer's customer ID. The app doesn't save it. {% hint style="info" %} **Targeting decides who sees a tool. It doesn't protect data.** Your products and prices stay as visible in the rest of your store as they are today, and the customer tags you use in rules are part of your storefront's page code. Don't put sensitive information in customer tag names. {% endhint %} ## AI processing Globo B2B Bulk Order uses an AI service, OpenAI, in two features. The app's server sends the data to OpenAI and passes the result back. | Feature | When AI is used | What is sent | | ------------------------------------------------------ | ---------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | | Quick Order form, order file upload | A buyer uploads an image: `.jpg`, `.jpeg`, `.png`, `.gif` or `.webp` | The whole image | | Quick Order form, order file upload | A buyer uploads a PDF whose text isn't a simple table with an SKU column and a quantity column | The text of the PDF, not the file. A PDF that is a simple table is read without AI. | | **Auto-translate**, in **Settings** > **Translations** | You click **Auto-translate** for a language | Your English storefront wording for the tools, the name of each text (as context) and the two language names. No customer, order or product data. | These never go to AI: * CSV and Excel files, and pasted SKU lists. They're read in the buyer's browser. Only the SKUs and barcodes go to the app's server for matching, without AI. * Order CSV downloads, the storefront tools themselves and the Dashboard. For order files: * The app asks the AI only for SKUs, barcodes, quantities and a PO or order number. The result goes back to the buyer's review. The app keeps neither the file nor the result. * An order file can contain more than SKUs and quantities, for example a buyer's name or address on a purchase order. The app sends the image, or the PDF's text, as it is, without removing anything first. * File upload is off by default. It's on for a form only when you turn on **Enable file upload** in **Customize** > **File upload order**. The file type chips in that section don't block other types: while file upload is on, buyers can upload images and PDFs. Usage limits are listed in [Let buyers upload an order file](/globo-b2b-bulk-order/quick-order-form/upload-an-order-file.md). For **Auto-translate**: * The translations arrive as unsaved changes in the editor. Nothing reaches your store until you save. * **Auto-translate** uses a monthly AI allowance; see **Usage** in the translation editor. Reading order files doesn't count toward it. {% hint style="info" %} If buyers can upload order files to your forms, consider mentioning in your store's privacy policy that uploaded images and PDFs are processed by an AI service. {% endhint %} ## Order CSV downloads in customer accounts When you turn on **Let buyers download orders as CSV** in **Settings** > **Order export** (off by default), buyers get a **Download CSV** action on their orders in customer accounts. The settings page notes: **Works with new customer accounts. Buyers can export orders they placed; B2B location admins can also export their location's orders.** What happens when a buyer clicks **Download CSV**: 1. The customer account sends the request to the app with the buyer's signed-in session and their language. 2. The app checks that order export is on, and that the buyer may see the order: they placed it, or they're a location admin of the B2B company location it belongs to. 3. The app reads that order's items from Shopify and builds the file with the columns you chose in **Settings** > **Order export**. 4. The buyer gets a download link that works for 10 minutes. About the file: * It contains only the columns you choose: order details such as **Order**, **Order date** and **PO number**, and item details such as **Product**, **SKU**, **Quantity** and prices. There are no columns for the buyer's name, email or addresses. * It's built from Shopify for each download and never saved. * Cells that start with `=`, `+`, `-` or `@` are neutralized, so spreadsheet apps don't run them as formulas. * Shopify lets the app read recent orders only (by default, the last 60 days). For older orders, buyers see **This order can't be downloaded.** See [Order export](/globo-b2b-bulk-order/settings/order-export.md) to set it up. ## Other services | Service | When | What it receives | | ---------------------- | ------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Shopify | Always | Your storefront loads product data from Shopify in the buyer's browser. The app's server reads your store data from Shopify with the permissions above. | | OpenAI | Image and some PDF order files, and **Auto-translate** | See [AI processing](#ai-processing). | | Live chat in the app | While you use the app in Shopify admin | So the support team knows which store they're helping: your store domain, store name and email, time zone, Shopify plan, app version, install date, your live theme's name, and whether the app embed is on and the Quick Order app block is added to your theme. Also anything you write in the chat. | | Email to Globo support | When you click **Send** on the **Contact us** page | What you fill in: **Your name**, **Your email**, the topic and issue, your message, and the optional **Page URL**, **Collaborator request code**, **Store password** and screenshots or video. The app also adds your store domain, Shopify plan and app version. | ## Uninstall and data deletion When you uninstall Globo B2B Bulk Order, Shopify notifies the app, and the app deletes your store's data straight away. It doesn't wait for Shopify's shop data erasure request, which arrives 48 hours later. The app deletes: * all your Quick Order forms, Variant Tables and Collection Quick Orders * all translations and the Auto-translate history * the Dashboard order records * any files stored for your store * your store details and settings, including the encrypted access keys What stays: * **Monthly AI usage.** The count of AI tokens and requests, by store domain, with no content. It's kept so that reinstalling doesn't reset the month's AI allowance. * **Data in your Shopify store.** PO numbers and notes on your existing orders stay, because they're part of the orders. The app doesn't remove the settings it published to your store's shop metafields (the **\[Do not edit]** ones). Without the app, nothing on your storefront uses them. * **Theme code you edited yourself.** If you pasted a Quick Order form's embed code into a theme file, the code stays there but shows nothing. Remove it in your theme's code editor. If you install the app again, it starts fresh, with default settings and English wording. Your earlier forms and tables aren't restored. The current month's AI usage carries on where it was. ## Privacy requests (GDPR) Shopify forwards privacy requests about your customers and your store to the app. | Request | What the app does | | --------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------- | | A customer asks for their data | There's nothing to send: the app keeps no records about individual customers. | | A customer asks to be erased | The app deletes anything it holds about that customer. It doesn't keep customer records, so normally there's nothing to delete. | | Your store's data is erased, 48 hours after you uninstall | There's nothing left to delete: the app deleted your store's data when you uninstalled. | ## Privacy policy, terms and data requests * [Privacy policy](https://globo.io/privacy-policy/) * [Terms of service](https://globo.io/terms-of-service/) * For questions about your data, or to ask for a copy or deletion, email . Include your store's `.myshopify.com` address so we can find your data. ## Related * [How it works](/globo-b2b-bulk-order/reference/how-it-works.md): how your settings reach the storefront and how orders are counted. * [Let buyers upload an order file](/globo-b2b-bulk-order/quick-order-form/upload-an-order-file.md): turn on order file upload and see its limits. * [Auto-translate with AI](/globo-b2b-bulk-order/settings/auto-translate.md): translate the storefront wording and check your **Usage**. * [Order export](/globo-b2b-bulk-order/settings/order-export.md): set up order CSV downloads in customer accounts.