Shopify Permissions
When you install Level, Shopify shows you a list of permissions to approve. Here’s what each group is for, in plain terms.
What Level uses access for
| Access | Why Level needs it |
|---|---|
| Orders (read & write) | Detect new COD orders, add tags like level-cod-verified, write order notes, cancel orders customers decline, and create orders placed through the Buy with COD button |
| Customers (read & write) | Match phone numbers so WhatsApp messages reach the right person |
| Products (read & write) | Show product names, images, and prices in WhatsApp messages and the Buy with COD popup |
| Checkout payment options (read & write) | Hide Cash on Delivery at checkout when your checkout rules match |
| Discounts & draft orders (read & write) | Attach discount codes to abandoned cart recovery messages |
| Gift cards (read & write) | Handle orders that include gift cards correctly |
| Store analytics events | Measure which WhatsApp messages lead to recovered sales |
The exact permission names you’ll see on the Shopify install screen: read_orders, read_all_orders, write_orders, read_customers, write_customers, read_products, write_products, read_payment_customizations, write_payment_customizations, read_discounts, write_discounts, read_draft_orders, write_draft_orders, read_gift_cards, write_gift_cards, read_customer_events, read_marketing_events, write_pixels.
What Level never does
- Process payments or issue refunds
- Change your product prices or inventory
- Message customers outside the flows you’ve turned on
- Share your customers’ details with anyone (the optional shared risk network shares only scrambled fingerprints, never actual phone numbers or emails)
If Level asks you to reconnect
When we add features that need new permissions (like checkout COD rules), you’ll be asked to Reconnect Shopify and approve the updated list. This takes a few seconds and doesn’t affect your orders or settings. See Reconnect Shopify.
Removing access
Uninstall Level from your Shopify Admin and all permissions are revoked immediately. COD verification and order sync stop right away.