Access is delegated, scoped, and revocable
PalSync uses Shopify authorization for the store context and PayPal authorization for transaction, tracking, and dispute operations. A merchant signs in directly at PayPal; PalSync does not need the merchant's PayPal password.
Dispute actions remain case-scoped
PayPal supplies the actions currently allowed for that exact case.
PalSync validates the selected response against the latest stored PayPal case snapshot.
Assisted monitoring can refresh state and deadlines, but automation cannot bypass the merchant-approval gate.
Money-moving or case-resolving actions display an explicit impact warning and acknowledgement before final submission.
Repeated identical requests use idempotency controls; an unresolved prior intent can require support reconciliation before another response is sent.
Account disconnection
Disconnecting a PayPal account deactivates its authorization and clears stored access and refresh credentials for new work. PalSync preserves existing disputes and their audit history. Re-authorize the payer before expecting new sync or case refresh activity.
Safe diagnostic data
Support can work effectively with the Shopify store domain, order number, PayPal transaction ID, dispute ID, timestamps, carrier text, PalSync status, request ID, and a redacted screenshot.
Never send
Passwords, one-time codes, private API keys, OAuth tokens, or session cookies.
Full payment-card data or bank credentials.
Unredacted identity documents or unrelated customer personal data.
Evidence files that are not required for the active PayPal case.
Remove access when ownership changes or the integration is no longer used. Limit Shopify staff permissions so only authorized operators can connect accounts or submit dispute responses.