App permissions and personal information

Modified on: Tue, 2 Jul, 2019 at 7:02 PM


On this page:

A. Introduction to personally identifiable information (PII) and app permissions

B. Four types of PII that an app can access


A. Introduction to personally identifiable information (PII) and app permissions

Personally identifiable information (PII) is any data that could potentially identify a specific individual. Apps that you install from the ShopBase App Store can access different types of PII when they need to use information about your store, products, orders, customers or other data.

Every app installed in your store will have access to PII about your ShopBase account, including your contact information and location.

Different apps require different types of information, depending on the function they perform. For example, an app that fulfills orders will require access to order information that includes customer PII, such as customer addresses and other contact information.

Access to data can be revoked by simply uninstalling the app. This will send the app developer a request (after 48 hours) to remove all of your customers' personal information the app collected while it was still installed. If you wish to remove the personal data of a specific customer from your store, the same request will be sent to every app you have installed that may have that customer’s information.

Before installing an app, you will get to review the types of PII and permission that it needs to access before you confirm the installation. After installation, these permission details can be viewed on the App details page. 

B. Four types of PII that an app can access

  • Customer personal information: contact information such as name, email, phone number, and address. Apps that deal with orders, fulfillment, or shipping also need access to location information (for example, IP address and geolocation), and user agent information (such as browser and operating system).
  • ShopBase account owner personal information: contact information for the account owner, including name, email, phone number, and addresses of all locations.
  • Staff account personal information: contact information for staff accounts, including name, email, and phone number.
  • Content provider personal information: information about blog authors or commenters (including email and IP address), and user agent information (such as browser and operating system).

If you need our assistance, don't hesitate to let us know via an email. We are here to help!

ShopBase team.


Did you find it helpful? Yes No

Can you please tell us how we can improve this article?