Documentation

Order Management Core

• View all orders with pagination:
• Bulk selection with checkboxes:
• Order details modal:
• One-click single deletion:

Filtering & Sorting InfoEssential

• Date range presets and custom:
• Payment status filtering:
• Fulfillment status filtering:
• Free-text search:

Export & Reporting SuccessRecommended

• CSV export for selected orders:
• All order details included:
• Pre-deletion backup:
• Audit log export:

UX Enhancements AttentionPower User

• Keyboard shortcuts (Ctrl+K:
• Ctrl+A):
• Loading skeletons:
• Toast notifications:
• Progress indicators:

Security & Compliance CriticalEnterprise

• GDPR mandatory webhooks:
• Session management:
• Audit logging:
• Data encryption:

GraphQL Queries

query GetOrders($first: Int!, $query: String, $sortKey: OrderSortKeys, $reverse: Boolean, $after: String) {
  orders(first: $first, query: $query, sortKey: $sortKey, reverse: $reverse, after: $after) {
    edges {
      cursor
      node {
        id
        name
        createdAt
        totalPriceSet { shopMoney { amount currencyCode } }
        displayFinancialStatus
        displayFulfillmentStatus
        lineItems(first: 10) {
          edges {
            node {
              title
              quantity
              originalUnitPriceSet { shopMoney { amount currencyCode } }
            }
          }
        }
      }
    }
    pageInfo {
      hasNextPage
      hasPreviousPage
      endCursor
      startCursor
    }
  }
}

mutation OrderDelete($orderId: ID!) {
  orderDelete(orderId: $orderId) {
    deletedId
    userErrors {
      field
      message
    }
  }
}

Query Parameters

Rate Limits

Shopify enforces rate limits on API calls. The app handles these automatically.

• 50 orders per deletion request:
• 2-second delay between batches:
• Automatic retry on rate limits:
• Queue system for large operations:

Tip: Work in batches of 50 or fewer orders for optimal performance

Session

Stores Shopify session tokens for authentication

model Session {
  id          String   @id
  shop        String
  state       String
  isOnline    Boolean  @default(false)
  scope       String?
  expires     DateTime?
  accessToken String
  userId      BigInt?
  firstName   String?
  lastName    String?
  email       String?
  accountOwner Boolean  @default(false)
  locale      String?
  collaborator Boolean? @default(false)
  emailVerified Boolean? @default(false)
}

AppInstallation

Tracks installed shops and their settings

model AppInstallation {
  id            String    @id @default(uuid())
  shop          String    @unique
  isActive      Boolean   @default(true)
  installedAt   DateTime  @default(now())
  uninstalledAt DateTime?
  @@index([shop])
}

AuditLog

Records all deletion actions for compliance

model AuditLog {
  id          String   @id @default(uuid())
  shop        String
  action      String
  orderId     String?
  orderName   String?
  orderValue  String?
  reason      String?
  performedBy String?
  metadata    Json?
  createdAt   DateTime @default(now())
  @@index([shop])
  @@index([createdAt])
  @@index([action])
}

GdprRequest

Tracks GDPR webhook requests and responses

model GDPRRequest {
  id            String    @id @default(uuid())
  shop          String
  requestType   String    // 'customers/data_request', 'customers/redact', 'shop/redact'
  customerId    String?
  customerEmail String?
  payload       Json
  status        String    @default("PENDING") // PENDING, COMPLETED, FAILED
  completedAt   DateTime?
  createdAt     DateTime  @default(now())
  @@index([shop])
  @@index([requestType])
  @@index([status])
}

App Lifecycle Webhooks

GDPR Compliance Webhooks CriticalRequired

Webhook Security

• HMAC signature verification:
• Timestamp validation:
• Replay attack prevention:
• Secure endpoint URLs:

Authentication

• OAuth 2.0 flow:
• Session token validation:
• HMAC verification:
• Secure cookie handling:

Data Protection

• TLS encryption in transit:
• AES encryption at rest:
• Regular backups:
• Access logging:

Required Permissions

The app requests minimal permissions needed for functionality

Compliance

• GDPR compliant:
• Shopify App Store certified:
• Regular security audits:
• Data processing agreements:

Optimization Strategies

• Edge caching for static assets:
• Lazy loading for large lists:
• Optimistic UI updates:
• Debounced search queries:

Performance Metrics

Best Practices

• Use filters to reduce order count:
• Work in batches of 50:
• Export before large deletions:
• Schedule bulk operations off-peak:

Common Issues

Error Codes

Getting Help

If issues persist, contact our support team