Shopify shows the list
What the screen covers
Every permission Refik asks for is on it, in Shopify’s own words, and nothing beyond the list is requested. The security page has them one at a time with what each one is for and what it cannot do.
Terms
There is no service agreement to sign. What there is: a permission screen from Shopify, a set of billing rules that live in code, a short list of things this app does not promise, and a data processing addendum on a page of its own. This page is the first three.
Install
Shopify puts a permission screen in front of you, you approve it, and that screen is the agreement. It is also the ceiling on everything Refik can reach.
Shopify shows the list
Every permission Refik asks for is on it, in Shopify’s own words, and nothing beyond the list is requested. The security page has them one at a time with what each one is for and what it cannot do.
It cannot widen quietly
A new permission puts a fresh approval screen in front of every store that already has Refik installed. That is why the list is short, and why it cannot grow without you seeing it happen.
You can take it back
Shopify invalidates the access token the moment you remove the app, so it stops working at once. There is nothing to revoke by hand, and no second account of ours to close.
Money
These are not terms we wrote for this page. They are the rules the code enforces, which is a different and more useful thing.
When the ceiling is reached Refik hands the conversation over rather than answering past it, so you get the handoff on record instead of a bill you did not choose.
Saying you can buy something you cannot is the one sentence a pricing page is most tempted to write, so the pages that talk about money on this site say the opposite out loud.
The plan table lives on the pricing page and it is printed from the same source the billing code reads — plan name, price, overage sentence and feature list, compared line by line. Change a figure there and that page fails to build rather than going quietly stale. Which is why no number was retyped here.
Leaving
Two moments, forty-eight hours apart, and the gap between them is deliberate.
At once
Shopify invalidates the token, so reading your store stops working immediately. Billing stops, and nothing renews itself after removal. The cached copy of your catalogue goes, along with that store’s settings and the answers you wrote.
Two days later
Shopify sends the store deletion request forty-eight hours after removal, and every database row for your store goes with it — plus the key-value records and the knowledge base built from your catalogue.
Why the gap
A merchant who removes the app by accident and puts it back the same afternoon does not lose their conversation history or their knowledge base. It is a window we chose, not a delay we could not close.
Limits
A terms page is where a product usually promises the most and commits to the least. These are the commitments that exist and the ones that do not, in the same list.
Each of those is a check in code rather than a line in a prompt. The difference matters: a prompt instruction is a request, and a check is the thing that holds.
The same four are written out at more length under what we do not claim, and the reasoning behind leaving the space empty is on the approach page.
Not written
All three wait on the same thing, and it is not somebody finding an afternoon.
What you may do with Refik, what we may do with your store, how either side ends it, and what happens to your data on the way out. The last of those is described on the privacy page; the other three are not written anywhere.
Which country’s law applies and where a dispute is heard. Neither can be written before there is a named party to be sued or to sue, and that is the first missing piece.
The clause that says what either side is on the hook for. It waits on the same named party. Writing one now would be a paragraph signed by nobody, which is worse than an empty space that says so.
Until those exist, what you accept is Shopify’s permission screen and the data processing addendum, which applies from installation; the other commitments that bind are the ones the billing code enforces. The legal hub says what each of them is waiting on.