# Built to be verified.

> Rabbot asks Shopify for exactly three permissions, all of them read access, and holds none that can change your store. Tokens are encrypted with AES-256-GCM, data is stored in the EU, and Shopify asks for it all to be erased about 48 hours after uninstall.
> Canonical: https://rabbot.ai/trust · Install: https://apps.shopify.com/rabbot

Every claim on this page can be checked before you install. The permission list, the privacy policy and the pricing all say the same thing.

## At a glance

- **3**: Shopify permissions requested, all of them read-only
- **0**: permissions that can change your store
- **EU**: where your store data is processed and stored
- **48h**: after uninstall, Shopify asks for your data to be erased and Rabbot erases it

Permissions requested at install: read_products, read_content, read_themes.

## What installing Rabbot grants

Shopify shows this list before you approve anything. It is the whole grant, and it never widens later.

- **Exactly three permissions**: Rabbot asks Shopify for exactly three permissions: read_products, read_content, read_themes. Shopify lists them on the install screen, before you approve anything. The App Store listing shows what they cover: products, collections, Online Store pages, theme, blog contributors and the store owner contact details.
- **No write permission exists**: Rabbot holds no permission that can change a product, a theme or a page. There is no second request later. What the install screen shows is all Rabbot ever gets.
- **No customer or order data**: Rabbot never asks for your customers, your orders or your payment details. Those permissions are absent from the grant, so that data stays out of reach.

## What happens to your data

The privacy policy states each of these in full, section by section, in plain language.

- **Tokens encrypted at rest**: Your Shopify access token is encrypted at rest with AES-256-GCM. The key is never stored in the source code or beside the encrypted data, and the token never appears in a log.
- **Hosted in the EU**: Your store's data is processed and stored on servers in the European Union. The privacy policy names the same location and the processors involved.
- **Deleted after uninstall**: Uninstall the app and monitoring stops. Shopify sends the deletion request about 48 hours later, and Rabbot erases your store data in one pass. Shopify sets that window, not Rabbot. It is the standard redaction window every app gets.

## What it costs to find out

The published ladder is the whole ladder. No price sits behind a sales call.

- **Free tier, no card**: The free plan watches 20 URLs and asks for no card at any point. Free forever, no card required. The pricing page and the App Store listing say the same.
- **Starter is $19 a month**: Paid plans start at $19 a month, and every price above it is published in full. The whole ladder sits on the pricing page, with what each step adds.

Full privacy policy, including the optional Google, Meta and TikTok (Beta) connections: https://app.rabbot.ai/privacy

## A new app, stated plainly.

Rabbot's App Store listing opened on 7 July 2026, and the launch was announced on this site on 23 August 2026. Either way it is a new app with a short public record behind it.

- Everything above is checkable today, without a single review to go on.
- The permissions and the prices are on the App Store listing. The encryption, the hosting and the deletion window are in the privacy policy.
- The free plan needs no card, so trying Rabbot costs nothing but the install.
- Rabbot can only read your store, so a trial cannot break anything in it.
- Uninstalling ends it. Monitoring stops at once, and the data is deleted about 48 hours later.

That is the whole answer. Judge the app on what you can check yourself.

## What Rabbot is not.

Rabbot watches your store and tells you when something breaks. It does not back your store up, and it cannot put anything back.

Rabbot tells you something broke. A backup app like Rewind puts it back.

- Rewind has been backing up Shopify stores since 2016. The two apps do different jobs and work well together.
- Rabbot has no commercial relationship with Rewind and earns nothing from naming it.
- Other monitoring apps exist. Compare the permission list and the check cadence, then decide.

---

Check it, then install it. Shopify lists every permission on the install screen, before anything is granted.

Add to Shopify, free forever: https://apps.shopify.com/rabbot

Free forever · no card required · never writes to your store