# Convrail for Shopify

> Install the app, paste your OpenAI pixel ID and Conversions API token, and Convrail does the rest: a web pixel registered through Shopify’s official API, server events from your order webhooks, a catalog kept in sync by product webhooks, a validated feed delivered by SFTP, and attribution on your dashboard. Your theme is never touched.

Canonical: https://convrail.com/platforms/shopify/

## What happens when you install

1. **OAuth in one click** The embedded app requests read access to orders and products. Nothing more.
2. **Web pixel registered** Convrail creates its web pixel through the Web Pixel API. It runs in Shopify’s sandbox and respects the customer privacy settings of your store.
3. **Webhooks subscribed** `orders/paid` for server-side conversions and attribution, `products/create`, `products/update` and `products/delete` for the catalog, plus the mandatory GDPR topics.
4. **Credentials validated** Your pixel ID and Conversions API token are checked live against OpenAI, then encrypted at rest. The store starts in test mode.
5. **Checklist to first attributed order** The home screen tracks each step: store connected, credentials valid, first events, feed configured, first delivery, first attributed order.

## The app screens


| Screen | What you do there |
| --- | --- |
| Home | Onboarding checklist and status at a glance |
| Settings | OpenAI credentials with live validation, test mode toggle, web pixel activation |
| Events | Recent events with source (browser or server), status and deduplication visible |
| Feed | Feed settings (seller name, countries, format, SFTP, schedule), run journal with rejections and diff |
| Dashboard | Attributed revenue split organic and ads, spend, ROAS, top products, daily trend |
| Health | Open and resolved alerts, notification settings, CSV export of attributed orders |
| Optimize | Completeness scores, prioritized actions, AI drafts to review |

The interface is available in English and French and follows Shopify’s Polaris design system, so it looks and behaves like the rest of your admin.

## Privacy and compliance

- GDPR webhooks (`customers/data_request`, `customers/redact`, `shop/redact`) are implemented: a customer redaction purges their events by hashed identifier, a shop redaction purges the store.
- Emails and phone numbers from orders are hashed with SHA-256 the moment the webhook is received; the clear values are never stored.
- Access tokens, API tokens and SFTP credentials are encrypted at rest with AES-256-GCM.
- Uninstalling the app removes the web pixel and stops all processing for the store.

## Frequently asked questions

### Which Shopify plans are supported?

Any plan that supports apps and web pixels, which includes all standard Shopify plans. Checkout extensibility is not required.

### Does the pixel respect my customer privacy settings?

Yes. It runs inside Shopify’s web pixel sandbox and follows the store’s consent configuration. Events from visitors who declined tracking are recorded as skipped and never sent.

### Do I need Shopify Plus?

No. The app uses the Web Pixel API and standard webhooks, available on all plans.

### Is the app free?

Yes during early access. Paid plans, when they exist, will be listed on the App Store with monthly and yearly prices before they are offered in the app.