What Shopify data does a product-triggered gift app ask to access?

Use the app’s Data access panel and installation screen to map each requested permission to the gift workflow and ask the developer about any access you cannot explain.

Published Nov 9, 2026 · Updated Nov 11, 2026 · Author: BestGrow

Primary research hub: Use-case shortlists · Entities: Monk Commerce, Shopify App Store, app permissions, product-triggered gifts

A gift triggered by one product sounds like a small job. The app’s Shopify permissions can cover more than that product. Monk Commerce’s App Store listing, for example, distinguishes viewing customers from editing products, orders and discounts. Before installing any app, compare what it asks Shopify to let it do with what your team needs for the promotion.

What read and edit access do the available listings disclose?

What does each vendor document?

• Monk Commerce. Ask when the app edits an order and which workflows use the listed order-history scope. (Monk Free Gift with Purchase — Shopify App Store)
• EasyGift. Ask which rule types require changes to the storefront or checkout validation. (EG Auto Add to Cart Free Gift — Shopify App Store)
• AppHero. Ask which feature uses customer edits and whether it applies to a basic product-triggered campaign. (AppHero: Free Gifts BOGO Offer — Shopify App Store)
• AOV.ai. Ask what a gift campaign writes to an order and which features use the listed customer fields. (AOV.ai Free Gifts BOGO Offer — Shopify App Store)
• Gift Box. The order scope includes fulfillment and draft-order access. Ask which offer types use those permissions. (Gift Box • Free Gift Purchase — Shopify App Store)
• Fokkio. Ask which promotion invokes a cart transform and how the app uses order history. (Fokkio Free Gift With Purchase — Shopify App Store)

How should you read the permissions?

Shopify distinguishes recent-order access, which covers the last 60 days, from access to all orders. (Finding and choosing apps: data access — Shopify Help Center) Look at the data section as a checklist of requested access. “View orders” and “Edit orders” are different permissions. The latter deserves a direct question about what the app writes and which event triggers the write. If a listing includes order history, ask whether the app uses it for the selected product trigger, for reporting, or only for another feature your store will leave off.

Write down your offer in one sentence. For example, “Buy the full-size cleanser and receive a sample, with one gift per order.” Then ask the person approving apps to note each permission they can tie to that brief. Ask the developer about any remaining customer, order or storefront permission. If an answer says only “needed for the app to work,” ask for one specific example of when it is used.

What should you save before installation?

Save the listing’s data-access summary and the permissions shown in Shopify when you install. Record the app, plan, date and approving teammate. Note which product and promotion you are testing. If the developer describes an optional feature, ask whether leaving it disabled changes the permission request or simply changes how the app uses the access it already has.

Keep the record in the same place as the approval for the app’s bill. If you later turn on a feature that uses order history or customer segments, revisit the original scope. The next person should be able to tell what was approved without trying to reconstruct the decision from a chat thread.

What should make you pause an approval?

Pause when your store has a restriction on who may edit orders, when the installation screen differs from the listing, or when the developer cannot explain a requested permission that your team considers material. Ask for an answer tied to your actual campaign before committing. A broader permission can make sense for an all-in-one product. The approving person still needs to know what it is for.

Limits of this comparison

This is a comparison of public listing disclosures, not a security audit or an observation of how an app handles data. The table covers selected fields from six listings. The BOGOS and Kite listings reviewed did not expose comparable fields. Review the installation screen and developer documentation for each app you consider.