Check storefront identity
Production chat, settings, analytics and support routes validate the Shopify storefront before trusting shop context.
Security and privacy
Store identity and market context are checked on the server.
Pocket Pal authenticates production storefront requests, carries the Shopify shop ID through data access, waits for analytics consent and records privacy work before processing it.
REQUEST CONTROLS
Storefront identityChecked
Shop filtersRequired
Analytics consentFail closed
Privacy jobsRetried
Filter data by Shopify shop ID
Database repositories and vector searches carry the shop ID so one merchant cannot retrieve another merchant's data.
Limit requests and allowed origins
Public endpoints apply route-specific rate limits and validate supported Shopify and application origins.
Record compliance work first
Customer export, customer redaction and shop deletion requests are stored before processing and can be retried after a failure.
Keep analytics off until allowed
Unknown or denied storefront consent blocks visitor persistence, first-party analytics events and PostHog initialization.
Keep personal exports out of errors
Structured logs include request context, while compliance export data and personal details stay out of error metadata.
Request path
Retrieve commerce data through controlled server tools.
Shopify remains the source for current product and variant data. Store knowledge searches include the shop and market filters, and order lookup compares the shopper's email on the server.
01
Shopper requestStore + country context
02
Scoped retrievalShop + market filters
03
AI replyTask-specific context
04
Stored recordConsent + retention rules
Read the policies
Check what is processed and who processes it.
The public documents cover data categories, purposes, retention, service providers, cookies and contact routes for privacy or security questions.
Ready when your store is
Test the boundaries as well as the answers.
Review market isolation, consent behavior and support access during the seven-day trial.