> For the complete documentation index, see [llms.txt](https://docs.samita.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.samita.io/reference/permissions-and-data.md).

# Permissions and data

Details on the Shopify permissions Sami Product Labels requires and how your data is handled.

**Sami Product Labels** requests only the Shopify permissions it needs. This page covers each permission, the webhooks the app subscribes to, and how your store data is used.

## Required permissions

| Permission                   | What it's used for                                                                                                                                                    |
| ---------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `read_products`              | Access product data (title, type, vendor, tags, price, inventory, variants, collections, metafields) to evaluate targeting rules and render badges on the storefront. |
| `read_themes`                | Check whether the app's App Embed block is enabled in your theme, so the app can prompt you to enable it if needed.                                                   |
| `read_files` / `write_files` | Upload and manage badge images (including AI-generated images) through Shopify's file system.                                                                         |

{% hint style="info" %}
Sami Product Labels does **not** request a customer-data permission (`read_customers`). Customer-based targeting — login status, customer tags, order history — is evaluated from your storefront's own customer context at render time, not via Shopify's customer data API.
{% endhint %}

## Webhooks

The app subscribes to these Shopify webhooks:

| Webhook                                                     | Purpose                                                                                                                                                |
| ----------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
| `app/uninstalled`                                           | Triggers cleanup of your stored badge, label, and analytics data when you uninstall the app.                                                           |
| `orders/create`                                             | Attributes completed orders to the badges displayed on their products, to power the [Analytics](/analytics/overview.md) dashboard.                     |
| `customers/redact`, `shop/redact`, `customers/data_request` | Shopify's mandatory GDPR compliance webhooks. Since the app does not store customer personal information, these are handled as no-op acknowledgements. |

## Data handling

### What data we store

* **Badge, label, badge group, trust badge, highlight, and banner configurations** — the settings, styles, targeting rules, and content you create.
* **Image assets** — badge images you upload or generate with AI, stored through Shopify's file system.
* **Analytics events** — aggregate add-to-cart and order events linked to badge displays, for the analytics dashboard (DIAMOND plan).

### What data we access

* **Product catalog data** — product titles, types, vendors, tags, prices, inventory levels, variants, and metafields to evaluate targeting rules.
* **Theme structure** — to check App Embed status and ensure proper integration.
* **Storefront metafields** — the app writes your badge, label, and trust badge configurations to shop metafields (namespace `SamitaLabels`) so your theme's App Embed block can render them without extra requests.

### What we do NOT store

* **Customer personal information** — no names, emails, addresses, or phone numbers.
* **Payment details** — no credit card numbers, billing information, or payment methods.
* **Order specifics** — beyond aggregate analytics counts, no individual order details are retained.

{% hint style="warning" %}
Data is processed under Shopify's data protection requirements. Uninstalling removes your stored configurations and analytics data per Shopify's mandatory deletion policies.
{% endhint %}

## Privacy and terms

* [Privacy Policy](https://samita.io/pages/privacy-policy)
* [Terms and Conditions](https://samita.io/pages/terms-and-conditions)

For any questions about data handling or permissions, contact us at **<support@samita.io>**.

***

## Next steps

* [How it works](/reference/how-it-works.md) — understand how the app delivers badges to your storefront.
* [FAQ](/help/faq.md) — answers to common questions about the app.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.samita.io/reference/permissions-and-data.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.