Shopify Survey App Permissions: What OrderSurvey Accesses and Stores

Evaluate a survey app's permissions and its data storage separately. A permission describes what the app is allowed to access. It does not tell you which data the app actually retrieves, saves or sends to a service you connect.

OrderSurvey's core surveys do not require customer-tagging access. Its app configuration has no required Admin API data scopes; write_customers is an optional permission requested when you connect customer tagging. Submitted survey answers are stored in OrderSurvey's database outside Shopify. Native survey blocks do not mean that all data stays inside Shopify.

This guide explains the distinction and the choices available before you launch. The privacy policy contains the full collection, sharing, retention and deletion details.

What a Shopify access scope tells you

Shopify uses access scopes to control which resources an app can read or change. For example, read_orders provides access to recent order data, while write_orders also permits changes. Access to orders older than 60 days requires the additional read_all_orders scope. Shopify explains these boundaries in its access-scope reference.

A write permission also includes read access to that resource. A permission described as useful for tagging can therefore be broader than the app's particular tagging operation. Review both the permission and the reason the app gives for requesting it.

Required scopes are granted as part of installation. Optional scopes can be requested later for a feature, and merchants can decline them. Shopify's scope-management documentation explains this process. Access to protected customer data is subject to additional Shopify requirements; a declared scope alone does not establish that every customer field is available.

An app having a scope is not proof that it has copied your customer list or full order history. Ask what it actually uses and retains. Conversely, an app can store information that a customer types into a survey even if it has no customer-directory permission.

How OrderSurvey's survey blocks use order context

The Thank you and Order status blocks receive context through Shopify's extension APIs. OrderSurvey uses the available context to select a survey for the page, audience and rules you configured. The extension contacts the app's backend to resolve the survey and submit answers.

For example, the app can save an order's first- or repeat-order classification so the same classification is available when its Order status page is revisited. If the necessary context is missing, a targeted survey can remain hidden. It does not guess that an order qualifies.

Online rules can use order total, item quantity, products or variants, shipping country and currency when those values are available. Customer-tag targeting is unavailable on these blocks. The targeting guide explains the supported rules and how to test them.

What OrderSurvey stores

These are the main categories relevant to a survey launch, rather than an exhaustive inventory:

Survey questions are controlled by the merchant. A free-text answer can contain personal information even when the question did not explicitly request it. Ask only for information that serves your purpose, and consider that content when exporting responses or configuring alerts.

The app uses hosted services to operate. Read the privacy policy for the current providers and processing details. Choosing a native extension does not remove the need to understand where submitted data goes.

Customer tagging is a separate choice

If you want an answer to add a customer tag, the app needs the relevant Shopify customer access and your store's approval of the optional write_customers permission. The builder provides a Connect Shopify customer tagging action when connection is needed and the feature is available.

OrderSurvey uses the authenticated customer identity associated with an eligible response. Guest responses without that identity cannot be tagged automatically. Tagging runs after the response is saved; check its delivery status in Responses before assuming a tag was applied. A saved survey response and a successful customer-tag update are separate outcomes.

You can collect responses without connecting tagging. Also, assigning a tag after an answer does not enable tag-based survey display rules. These are different features.

Exports and alerts move response data to another destination

CSV export reads the survey responses already stored by OrderSurvey. It does not require enabling customer tagging. Exports include question-and-answer rows, order references and other response fields, so treat the downloaded file according to your team's data-handling practices.

Unlimited also supports configured webhook alerts. An alert can include survey answers and order information in the destination you select. Review that destination and who can access it before enabling the alert; do not assume that a notification contains only an anonymous score.

The Free plan includes 100 responses per rolling 30 days. Unlimited is $24 USD/month, with unlimited responses, CSV export, webhook alerts and priority support. See the plan comparison to decide whether your volume or reporting workflow needs Unlimited.

Questions to resolve before installing or connecting a feature

• Which permissions are needed for the feature I will actually use?
• Which extra features request access later, and can I leave them disconnected?
• What information is stored beyond the survey answer itself?
• Will exports or alerts send that information to a shared file, channel or service?
• What happens to retained data when I uninstall, reinstall or request deletion?

Uninstalling and deleting stored history are different events. OrderSurvey's current policy includes a recovery window after uninstall and a process for earlier deletion requests. Review the retention and deletion policy rather than assuming that uninstall instantly removes every stored record.

If an access request is unclear, email dennis@ordersurvey.com with the feature you want to use. We can explain the permission and help you start with a short survey that fits your needs.

Install OrderSurvey, see the walkthrough, or book a 20-minute setup call. We can help choose the first question, add the blocks to both pages and verify a saved response.

Frequently asked questions