Shopify integration¶

Connect your Shopify store to Dxtra to automatically track customer data, respond to data subject requests, and manage consent preferences across your store.

Overview¶

When you process orders through Shopify, you collect and store customer data including names, email addresses, billing and shipping addresses, phone numbers, and order history. Dxtra integrates with Shopify to automatically discover this data, enable customers to access their information, and execute deletion requests—all while maintaining full compliance with GDPR, CCPA, and other privacy regulations.

What you can do¶

• Access Requests — Customers can request export of their name, email, address, phone, order history, and preferences
• Deletion Requests — Fulfill customer erasure requests by deleting accounts and associated customer data
• Consent Management — Sync email marketing consent preferences between Shopify and your other platforms
• Data Discovery — Automatically identify all customer personal data stored in Shopify
• Preference Propagation — Update marketing consent across your integrated platforms when a customer opts out

Prerequisites¶

• Active Shopify store (any plan)
• Dxtra workspace with admin access
• Shopify admin access

Setup instructions¶

Step 1: Select Shopify from processors¶

1. Log in to your Dxtra dashboard
2. Go to Processors page
3. Click Select Processor dropdown
4. Find and select Shopify

Step 2: Enter credentials and authorize¶

A multi-step onboarding wizard appears:

1. Data Processor Details — Review Shopify's information
2. Enter API Key — Dxtra prompts you to generate and paste a Shopify API token:
3. Go to your Shopify Admin → Settings → Apps and Integrations
4. Click "Develop apps" and create a new app named "Dxtra"
5. Under "Admin API scopes," enable: read_customers, write_customers, read_orders, read_customer_events
6. Copy the Admin API access token
7. Paste into the Dxtra wizard
8. Data Controller DID — Dxtra displays your organization's unique identifier for this integration
9. Confirm and Onboard — Review permissions and click "Confirm" to activate

Step 3: Verify in Manage Processors table¶

Once onboarded, your Shopify processor appears in the Manage Processors table with an "Interconnected" badge.

Data covered¶

How data subject rights work¶

Access requests¶

When a customer requests their data:

1. Create a new DSRR in Dxtra with the customer's email
2. Dxtra automatically queries Shopify for:
3. All customer records
4. Complete order history with item details
5. Marketing preferences and consent status
6. Generate an export file (CSV or JSON)
7. Send to the customer within 30 days (or your jurisdiction's deadline)

Deletion requests¶

When a customer requests erasure:

1. Verify their identity via email confirmation
2. Create a deletion DSRR in Dxtra
3. Choose scope:
4. Delete customer account and contact data
5. Keep order records for tax/legal compliance (pseudonymized)
6. Delete all marketing preferences
7. Dxtra executes deletion from Shopify
8. Send confirmation to the customer

Monitoring and sync status¶

After setup, monitor your Shopify integration from the Manage Processors page:

• Interconnected — Connection is active and syncing
• Inactive — Connection has been lost (token expired or permissions revoked)
• Pending — Initial sync in progress

Dxtra syncs Shopify data in near real-time. When a new customer places an order or updates their profile, Dxtra detects the change within minutes.

What triggers a sync¶

Consent and preference propagation¶

When a customer updates their marketing preferences through your Transparency Center, Dxtra can propagate that change back to Shopify:

• Email opt-out — Dxtra updates the customer's accepts_marketing flag in Shopify
• Full marketing opt-out — Dxtra removes marketing tags and unsubscribes the customer
• Consent withdrawal — Dxtra logs the withdrawal and updates all connected platforms

This works in both directions — if a customer unsubscribes directly in Shopify, Dxtra detects the change and updates your consent records.

Multi-store setup¶

If you operate multiple Shopify stores, connect each store as a separate processor in Dxtra:

1. Repeat the setup process for each store
2. Each store gets its own processor entry in Manage Processors
3. DSRRs automatically search across all connected stores
4. Consent preferences propagate to all connected stores

Troubleshooting¶

Connection shows "Inactive"¶

• Verify the API token is still valid in your Shopify Admin
• Check that all required scopes are enabled (read_customers, write_customers, etc.)
• Regenerate the API token in Shopify and update it in the Dxtra Processors page

Shopify data not syncing¶

• Check your Shopify Admin → Apps and Integrations → Dxtra app is installed
• Verify the Dxtra app has not been uninstalled or permissions revoked
• Test with a new customer access request to confirm connectivity
• Wait 2-3 minutes for sync to complete (Shopify enforces API rate limiting)

Customer data not found¶

• Confirm the customer email address matches exactly in Shopify
• Verify the customer exists in Shopify (check customer list or order history)
• Ensure Shopify has not already deleted the customer record
• Check that email addresses don't have extra spaces or case sensitivity issues

Deletion failed¶

• Confirm the customer is not a Shopify staff account
• Verify there are no pending orders in fulfillment (cancel or complete first)
• Check for app conflicts with other Shopify apps
• Contact support@dxtra.ai with the customer email and error details

Orders retained after deletion¶

This is expected. Shopify requires retention of order and payment records for tax compliance. Dxtra pseudonymizes the personal data (replaces the customer name and email with anonymized identifiers) but retains the order record. Your privacy notice should explain this.

Best practices¶

• Test before go-live — Create test orders and run sample DSRRs to verify data retrieval works end-to-end
• Document your process — Train team members on how to create and fulfill DSRRs through Dxtra
• Monitor sync status — Check Manage Processors regularly for any "Inactive" alerts
• Update your privacy policy — List Shopify as a data processor and describe what customer data is collected
• Connect related platforms — Link your email marketing and payment platforms for complete consent propagation

Related integrations¶

• WooCommerce — Alternative e-commerce platform integration
• Stripe — Connect Stripe for payment data compliance
• Klaviyo — Sync consent preferences for Shopify email marketing
• Mailchimp — Sync consent preferences for email campaigns

Next step: Connect your email marketing platform or payment processor to manage consent across all customer touchpoints.