Built to be verified.
Every claim on this page can be checked before you install. The permission list, the privacy policy and the pricing all say the same thing.
- 3Shopify permissions requested at install, all of them read-only
- 0changes Rabbot makes without you tapping a fix and confirming it
- EUwhere your store data is processed and stored
- 48hafter uninstall, Shopify asks for your data to be erased and Rabbot erases it
What Shopify asks you to approve
At install, Shopify's three permissions can only read, by the grant itself. A write permission is granted only when you tap a fix and approve Shopify's prompt. Meta's catalog permission and Google's Merchant Center permission have no narrower read-only form. There, Rabbot reads and never writes by its own code, and automated tests fail the build if a write method is ever added.
- read_products
- read
- read_content
- read
- read_themes
- read
- write permissions at install
- none
- write_products
- asked on your first tap of a fix, or from Settings, revocable there
- write_online_store_navigation, read_online_store_navigation
- asked per tap on a redirect fix
- read_reports
- asked only if you switch the revenue line on
- write_analytics_annotations
- asked only if you switch analytics annotations on in Settings
Every fact, and where to check it.
Cross-check any line below against the Shopify install screen, the App Store listing or the privacy policy. They agree, because they describe the same app.
What installing Rabbot grants
Shopify shows this list before you approve anything. It is the whole install grant. Write access is asked only when you tap a fix, through the same Shopify prompt, and you can decline it.
Exactly three permissions
Rabbot asks Shopify for exactly three permissions: read_products, read_content, read_themes.
Shopify lists them on the install screen, before you approve anything. The App Store listing shows what they cover: products, collections, Online Store pages, theme, blog contributors and the store owner contact details.
Writes only on your tap
Installing Rabbot grants no write permission. Rabbot asks for one the first time you tap a fix, through Shopify's own prompt, and writes only what that fix shows you. A redirect fix asks for the navigation permission the same way, on each tap.
Decline the prompt and the finding stays open. Every fix shows the value it will write before you confirm, and you can undo it for 30 days. Rabbot never writes to your theme. You can revoke the write permission from the Settings page in the app at any time.
No customer or order data
Rabbot never asks for your customers, your orders or your payment details.
Those permissions are absent from the grant. Switch the revenue line on and Rabbot asks for one read permission for Shopify's reports: daily totals, never an order or a customer, kept 90 days. The privacy policy's section "Sales totals (only if you turn this on)" says the same.
Protected Customer Data Level 2
Shopify approved Rabbot for Protected Customer Data Level 2 on 25 September 2026. Rabbot still reads no order or customer rows. The approval covers the daily sales totals behind the revenue line.
Shopify's Protected customer data requirements (shopify.dev) list what Level 2 demands. The privacy policy section "Sales totals (only if you turn this on)" describes the daily totals Rabbot reads.
What happens to your data
The privacy policy states each of these in full, section by section, in plain language.
Tokens encrypted at rest
Your Shopify access token is encrypted at rest with AES-256-GCM.
The key is never stored in the source code or beside the encrypted data, and the token never appears in a log.
Hosted in the EU
Your store's data is processed and stored on servers in the European Union.
The privacy policy names the same location and the processors involved.
Deleted after uninstall
Uninstall the app and monitoring stops. Shopify sends the deletion request about 48 hours later, and Rabbot erases your store data in one pass.
Shopify sets that window, not Rabbot. It is the standard redaction window every app gets.
Product steps, for Rabbot only
Rabbot records which steps your store reached, such as the install, the first check and a tapped fix, for its own product decisions.
No third-party analytics run inside the app. These records are deleted with everything else at uninstall.
What Rabbot pools across stores
Rabbot keeps one shared ledger of catches across every store it monitors. It records that a problem was caught and what kind it was, never whose store it was.
One bare fact per catch
Each record holds the kind of change, its severity, when it opened and closed, the theme id and the store's vertical. It never holds your shop domain, a URL, page content, alert text or any payload from Google, Meta or TikTok.
The privacy policy's section 9, "How we use this information", describes the same shared, pseudonymised ledger.
No record names a store
Your store is stored under a keyed hash, and any figure Rabbot publishes or shares is calculated across at least twenty stores.
The privacy policy's section 9 states the twenty-store floor. The ledger sits in its own database on the same EU server.
On by default, off in one switch
Switch the ledger off in Settings and Rabbot stops collecting and deletes the records already stored for your store.
The switch is on the Settings page in the app, and section 9 of the privacy policy says the same. Switching it back on rebuilds the records from your store's history at the next check, and uninstalling erases them with everything else.
What it costs to find out
The published ladder is the whole ladder. No price sits behind a sales call.
Free tier, no card
The free plan watches 20 URLs and asks for no card at any point.
Free forever, no card required. The pricing page and the App Store listing say the same.
Starter is $19 a month
Paid plans start at $19 a month, and every price above it is published in full.
The whole ladder sits on the pricing page, with what each step adds.
The full policy, including the optional Google (Merchant Center and Search Console), Meta and TikTok (Beta) connections, is at app.rabbot.ai/privacy.
A new app, stated plainly.
Rabbot's App Store listing opened on 7 July 2026, and the launch was announced on this site on 23 August 2026. Either way it is a new app with a short public record behind it.
- Everything above is checkable today, without a single review to go on.
- The permissions and the prices are on the App Store listing. The encryption, the hosting and the deletion window are in the privacy policy.
- The free plan needs no card, so trying Rabbot costs nothing but the install.
- On the free plan Rabbot only reads your store, so trying it cannot break anything in it.
- Uninstalling ends it. Monitoring stops at once, and the data is deleted about 48 hours later.
That is the whole answer. Judge the app on what you can check yourself.
What Rabbot is not.
Rabbot watches your store and tells you when something breaks. It does not back your store up. The few things it can put back are the fields it watched change, and only when you tap.
Rabbot tells you something broke. A backup app like Rewind puts it back.
- Rewind has been backing up Shopify stores since 2016. The two apps do different jobs and work well together.
- Rabbot has no commercial relationship with Rewind and earns nothing from naming it.
- Other monitoring apps exist. Compare the permission list and the check cadence, then decide.
Check it, then install it.
Shopify lists every permission on the install screen, before anything is granted.
Free forever · no card required · writes only when you tap