SurgeAOV Logo
Official Shopify Partner Review & Compliance Audit

Shopify App Submission Compliance

SurgeAOV App Architecture Audit • Verified against Shopify Partner Guidelines & Security Policies

1. Shopify Access Scopes Verification

Minimal Scope Compliant

SurgeAOV requests only the minimum necessary API scopes required for automated volume discounts and checkout cart threshold bar calculations:

read_products, read_discounts Verified
write_discounts, write_checkouts Verified
read_orders, write_orders Verified
read_checkouts Verified

2. Mandatory Webhooks Implementation Audit

GDPR Endpoint Active
webhooks.customers.data_request.tsxHTTP 200 Handling

Processes customer data requests submitted via Shopify merchant admin within mandatory 48-hour SLA.

webhooks.customers.redact.tsxHTTP 200 Handling

Executes automated customer PII redaction and database purge upon receiving Shopify redaction webhook.

webhooks.shop.redact.tsxHTTP 200 Handling

Executes 48 hours post app uninstallation to delete merchant shop tokens, access credentials, and campaign logs.

3. Shopify Billing API Standard

Shopify Managed Billing

SurgeAOV routes 100% of merchant subscription payments exclusively through Shopify's native Billing API (shopify.authenticate.admin.billing.request). We do NOT utilize external payment gateways (Stripe/PayPal) for app billing.

✓ 14-Day Free Trial Enforced • Test Store Simulation Active for Shopify App Reviewers

4. Public Compliance Links for Shopify Reviewers

SurgeVolume Privacy PolicySurgeAOV Privacy PolicyPublic Terms of Service PageMerchant Installation & Theme Embed GuideMerchant Support & SLA Page