What 101 reads from and writes to your Shopify store

101 Marketplace · updated with plugin version 9.2.7

When you connect your Shopify store to 101 Marketplace, you grant our app access to part of it. This page says exactly what that means. It is served by the software itself, so it changes when the software does.

What we read

• Your products. Title, description, images, price, compare-at price, variants and options, SKU, barcode, weight, tags, and whether each product is published to your Online Store.
• Your inventory. Stock levels at the one location you choose, and whether each item is tracked.
• Your store settings, only these: currency, time zone, plan and locations. We check the currency because 101 trades in Egyptian pounds and never converts.
• Orders that 101 created in your store — and only those. We read them back to see whether you have shipped, cancelled or refunded.

We do not read your customer list, and we do not read any order that did not come from 101.

What we write

• Orders. One Shopify order per 101 order for your products, with the customer's name, phone and delivery address — your courier needs all three — the items, the delivery charge, and the amount to collect.
• Stock, either by letting the order reduce it or by adjusting the level, depending on your settings.
• Cancellations and refunds, for 101 orders only.
• Fulfilment, if you ask us to: marking a Shopify order fulfilled when it is completed on 101.
• Webhook subscriptions, so your changes reach 101 within seconds.

We never create, edit, delete or unpublish your products. The app does not hold permission to write product data — not as a policy, as a technical fact. You can see this on Shopify's own permission screen when you install it. If you change a price on Shopify, 101 follows; 101 can never change a price on Shopify.

Your customer's email

We do not send you your customer's email address. Each order we create carries a 101 address instead, in the form orders+12345@101marketplace.shop, where the number identifies the order.

This is deliberate. Your Shopify never builds a marketing contact from a 101 sale, and the buyer's own address never leaves 101. Replies to that address reach 101 support.

What we store, and for how long

• Your access token and webhook secret, encrypted with AES-256-GCM under a key held separately from the site's general keys. Never displayed after saving, never logged, never shared.
• A map linking each of your products to its 101 counterpart, for as long as the connection exists.
• A record of every call between 101 and your store. Successes are deleted after 30 days, failures after 90.
• Order data, with the order, for as long as we must keep it.

When you disconnect, the connection, its credentials, its product map and its records are deleted. Products already imported stay on 101 as ordinary products unless you ask us to remove them.

What we do not do

• We do not sell, rent or share your data or your customers' data.
• We do not market to your customers.
• We do not use your data to train anything.
• We do not touch any part of your store outside what is listed above.

Refunds and cancellations

These happen on 101, not on Shopify. If you refund or cancel a 101 order inside your Shopify admin, 101 will not apply it — it opens a support case so a person reconciles the two. This stops the same money moving twice.

If something goes wrong

If your credentials or your data are exposed, we will tell you within 72 hours of finding out, say what we know, and revoke the affected access immediately. You can disconnect at any time from your 101 dashboard, or by removing the app in Shopify — either stops all access at once.

Questions: help@101marketplace.shop