How permission requests work
This policy describes Toolbench: Store Utilities, provided by YK Tech Solutions. It explains the app’s module-based permission requests and how information is handled.
- Install Toolbench. The app’s required store-data scope list is empty. Installation does not grant the optional access needed by every module.
- Choose a module to turn on. Toolbench checks the permissions that module needs against the permissions already granted to the app.
- Review new access in Shopify. If required access is missing, Shopify presents a permission request. You can approve or decline. The module cannot finish enabling without the access it needs.
- Enable additional modules when you need them. A module that needs additional access prompts you for approval. A module whose permissions are already granted does not need a duplicate approval.
Permissions are granted to the app installation. Requests are triggered by your module choices, but Shopify permissions are not separate access accounts for each module. For example, two modules may both use product read access.
View History requires no additional store-data scopes. It still records staff page-view information when its Tools block is present and accessible.
For Shopify’s explanation of these controls, see optional access scopes.
Access by module
This reference explains what each module uses access for. Shopify’s approval screen shows the permissions being requested. Each module’s documentation includes setup steps and limits.
| Module | Access and purpose |
|---|---|
| Product Change History | Reads products and inventory. This module does not edit product data. |
| Collection Change History | Reads products and collections through Shopify’s product access permission. It does not change collections. |
| Discount Change History | Reads discounts and products. It records changes without creating or editing discounts. |
| Order Change History | Reads orders and customers. It does not edit order or customer records. |
| Customer Change History | Reads customers. Tracked customer details can appear in the stored before-and-after history. |
| Cart History | Reads orders and customers and uses an app proxy for the optional theme embed. Cart records can include customer links and cart contents. |
| Shipping Rules | Reads products and manages the shipping customizations created by Toolbench. |
| Payment Rules | Reads products and manages the payment customizations created by Toolbench. |
| Fulfillment Rules | Reads products and locations and manages the fulfillment constraints created by Toolbench. |
| Discount Rules | Reads products and manages discounts created by Toolbench. |
| Low Stock Alerts | Reads products, inventory, locations and home-market settings. It does not change stock quantities. |
| Catalog Health | Reads products and inventory. It reports issues without editing or generating product content. |
| Broken Link Redirects | Reads products and collections and creates the URL redirects you approve. |
| Internal Notes | Reads orders, customers and products to associate notes with the correct records. Notes are stored in Toolbench rather than the original Shopify note field. |
| View History | No additional store-data scopes. The Tools block records staff visits using the page and session context Shopify provides. |
| Manual Flow Triggers | Reads orders, customers and products. Toolbench starts the workflow; its configured Shopify Flow actions make any changes. |
Read permissions allow access to relevant records; they do not authorize edits to those records. Modules that create redirects, checkout customizations or discounts need corresponding write access. Manual Flow Triggers starts workflows whose configured actions can make changes.
Information we process
- Installation and account information: store identity, installation status, authentication/session information, plan and billing records needed to operate Toolbench.
- Data for enabled features: relevant products, collections, inventory, discounts, locations, orders or customer information, within the permissions you grant. Order and customer features can include names, contact details and addresses.
- Saved history and settings: snapshots, before-and-after values, rule configurations, module preferences and recorded workflow runs.
- Cart activity: recorded cart contents and activity, and customer or order links where available. Cart History’s optional theme embed helps connect signed-in shoppers to their carts.
- Staff activity and notes: recorded page views and staff identity for View History, and the notes staff enter in Internal Notes. Avoid adding unnecessary sensitive information to notes.
- Support and diagnostics: messages and screenshots you send us, app feedback, and operational logs used to investigate errors and support the service.
How information is used and shared
We use information to deliver the modules you enable, display their results, manage your subscription, provide support and investigate operational issues. YK Tech Solutions does not sell merchant or customer information.
Toolbench exchanges information with Shopify to provide its features. Service providers supporting hosting, storage and operations process information needed to deliver the service. Information may also be disclosed when required by applicable law or to respond to a valid Shopify platform request.
Toolbench’s Sidekick extension provides read-only module and setup information through Shopify. It does not itself enable modules, grant permissions or edit store records. Read about Sidekick setup help.
Contact us if you need details about service providers or data handling for your store.
Retention and deletion
Retention depends on the module and its settings. Current-value snapshots and historical changes can have different retention periods. See the retention reference for default periods and available settings.
Turning off a module is not a deletion request. Saved module data is kept so you can resume use. Switching plans also does not erase saved history.
Toolbench handles Shopify customer data-removal requests and the shop data-removal event associated with uninstalling. The shop removal process deletes module operational data and associated records, including tracked-order usage records and app feedback. Basic store identity/status, installation history and billing-plan history are retained as account and business records.
Uninstalling and completing data removal are separate events. For a specific deletion request, including retained account records or questions about backups and logs, contact us. We do not describe uninstalling as an instant deletion of every record.
Your controls
- Choose which modules to enable and decline additional access requests you do not want to grant.
- Review Toolbench’s granted access in Shopify. Contact us if you need help with removing optional access.
- Turn off modules you no longer use. This does not automatically revoke permissions already granted to the app.
- If a required permission is revoked, Toolbench disables modules that depend on it. Removing a shared permission can affect more than one module.
- Manage which staff members can use Toolbench through Shopify roles and app access. Review staff access setup.
- Uninstall Toolbench through Shopify when you want to remove the app from your store.
Privacy questions and requests
Email hello@yktechsolutions.com for privacy questions, access or correction requests, deletion requests, or security concerns. Include your shop domain and what you want us to review. Do not send passwords or access tokens.
If you are a shopper, contact the store where you placed your order first so it can identify your records and initiate the appropriate request. We may need to verify a requester’s authority before disclosing or deleting information.
We update this page when Toolbench’s data handling changes. The effective date above identifies the current version.