Purpose and authorization
RevenuePath is a merchant-authorized synthetic monitoring service for Shopify online stores. An authenticated merchant selects a product or landing-page URL on a store they own or administer and chooses desktop or mobile monitoring. RevenuePath opens that configured path in a real browser, selects an available variant when needed, adds the product to cart, verifies the cart, and confirms that the beginning of Shopify checkout is reachable.
Traffic profile
The fastest scheduled cadence is one browser journey every 15 minutes per active monitor, or up to 96 scheduled journeys per day for that monitor. A merchant can also run a one-time setup audit, and eligible plans can trigger a check after that merchant publishes a theme. The number of HTTP requests in a journey depends on the selected theme and installed storefront apps; RevenuePath loads only the page resources and first-party journey steps needed to render and verify the configured path.
Checks are staggered and globally concurrency-limited. Shopify rate-limit, security-rejection, and explicit bot-challenge responses are treated as inconclusive rather than proof of a merchant outage. RevenuePath honors Retry-After with an additional safety buffer and uses a durable shared circuit breaker to delay further storefront traffic. It does not rotate IP addresses to evade a traffic control.
Web Bot Auth identity
RevenuePath signs eligible first-party HTTPS requests using Web Bot Auth. Shopify can use the following stable identity and public key directory to verify those requests:
- Bot identifiers
revenuepath-desktopandrevenuepath-mobile- Signature-Agent
https://app.getrevenuepath.com- Public key directory
- View the active signing keys
Browser User-Agent versions can change when security updates are deployed. The Signature-Agent value and signed public key directory are the authoritative RevenuePath bot identity.
Data handling
RevenuePath stores monitor configuration, bounded timing and result metadata, technical diagnostics, and a private screenshot when a customer journey fails. Failure screenshots are configured to expire within seven days. RevenuePath does not intentionally collect shopper profiles, orders, payment details, theme files, or theme content, and it does not place a purchase.
Operational data is processed in RevenuePath's Microsoft Azure infrastructure. If the merchant enables incident email alerts, limited monitor, incident, and recovery information is sent through Resend for transactional delivery. RevenuePath does not sell storefront or merchant data. See the Privacy Policy and Data Deletion page for more detail.
Merchant controls and opt-out
Only the Shopify store that installed and authorized RevenuePath can configure checks for that store. An authorized merchant can stop traffic at any time by pausing or deleting a monitor. Uninstalling RevenuePath stops scheduled monitoring and cancels queued work for that installation. Disabling incident emails stops notification delivery but does not by itself pause browser checks.
A website operator who believes RevenuePath is accessing a storefront without valid authorization can request an immediate investigation and traffic suspension by emailing support@getrevenuepath.com. Include the permanent myshopify.com domain, affected storefront hostname, approximate UTC timestamp, and any Shopify or Cloudflare request identifier available. Never send passwords, access tokens, payment information, or shopper data.
Contact
- Operator
- Ahmet Uğur / RevenuePath, Türkiye
- General and opt-out
- support@getrevenuepath.com
- Privacy and deletion
- privacy@getrevenuepath.com
- Security reports
- security@getrevenuepath.com