Integrations

Shopify callback shop redact

Receives Shopify's mandatory GDPR shop/redact webhook, sent roughly 48 hours after the app is uninstalled, and queues background processing that soft deletes the matching Shopify integration and its stored credentials unless the app has been reinstalled, then emails the workspace owners and admins. Signed requests only: Shopify's x-shopify-hmac-sha256 header is verified and the call is rejected with 401 without it.

POST /api/sys/v{version:apiVersion}/integrations/shopify_callback_shop_redact

Authorisation: No authentication needed

Request arguments

Name	Type	Source

Request body example

No input arguments

Response

Status: 200 (OK)
Type: DTO_acknowledgement

Wrapper: DTO_response_wrap

Other statuses: 400 (BadRequest), 403 (Forbidden), 401 (Unauthorized)

Response body example

DTO_acknowledgement

Name	Type	ReadOnly	Description
message	String		Message

Generated Aug 4, 2026 18:37