1. Purpose of this Notice
This notice provides full transparency regarding the exact Shopify API access scopes, webhook events, and data fields utilized by MakeItCustom. It explains why specific permissions are required and explicitly clarifies what customer data is not processed by the application.
2. Shopify API Access Scopes & Justifications
MakeItCustom requests only the minimum access scopes necessary to operate product personalization, checkout validation, and print file generation:
| Shopify Access Scope | Technical Function in MakeItCustom | Necessity |
|---|---|---|
read_orders | Subscribes to orders/create webhooks to identify customized line items (via _design_id and _customization_snapshot properties) and enqueue manufacturing jobs. | Critical: Order fulfillment and production job creation. |
write_products | Creates and manages exact-price customization fee variants in the merchant catalog, and verifies product variant ownership during customization authorization. | Critical: Accurate line item fee billing in Shopify checkout. |
write_metaobjects | Stores app configuration records, sync flags, and template registry items within Shopify-native metaobjects where applicable. | Critical: Merchant store data synchronization. |
write_metaobject_definitions | Provisions the schema definitions required to support merchant metaobject configurations. | Critical: Initial app setup and schema management. |
write_validations | Installs and configures Shopify Checkout Validation Functions (e.g. cart-validation-proof) to prevent checkout when customization pricing is tampered or expired. | Critical: Checkout security and price protection. |
3. Protected Customer Data (PCD) Assessment
In accordance with Shopify's Protected Customer Data (PCD) architecture, MakeItCustom operates solely under the approved category of Store Management.
What We Do Process from Shopify Orders:
- Shop Domain & Shop ID: To ensure tenant isolation and link jobs to the correct merchant account.
- Shopify Order ID & Order Number: E.g. Order #1001, to display recognizable order references in the merchant production dashboard.
- Line Item Identifiers: Line item IDs, quantities, and product/variant GIDs.
- Line Item Custom Properties: Technical custom attributes attached during "Add to Cart" (
_design_id,_customization_snapshot,_customization_token).
Protected Customer Data NOT Intentionally Stored or Used:
MakeItCustom does not request, store, or utilize the following optional customer fields:
- Customer Personal Name
- Customer Email Address
- Customer Phone Number
- Customer Shipping Address or Physical Street Address
- Customer Billing Address or Payment Instrument Details
4. Explicit Data Guarantees
5. Questions & Compliance Inquiries
For additional questions regarding our Shopify API integration, Protected Customer Data policies, or compliance practices, please contact:
Email: support@codifysystem.com
Inquiries: Data Protection Officer & Lead Integrations Architect