Payment app GDPR webhooks

[matiasturunen]

I'm developing a payments app for Shopify and got to implementing gdpr webhooks. In Shopify.dev it says that "If your app has been granted access to customer or order data, then it will receive a data request webhook." Payments apps dont have access to customer or order data through Shopify API, but the do recieve all of that information if payment is done through them (and storing it is required for our app to work properly). When testing "customers/data_request" and "customers/redact" webhooks, I did notice that Shopify doesn't actually call any of my configured endpoints.

Is this because of it's a payments app, or should there be a call to my app done by Shopify?

[bishpls]

Do you have the webhook endpoints set up in your partners.shopify.com Admin Dashboard for the app? 

You can't subscribe to them via normal API webhook registration, you MUST set the URLs through the "GDPR Mandatory Webhooks" section under App Setup. 

[matiasturunen]

Yes, I have configured those gdpr endpoints in app settings

[matiasturunen · Accepted solution]

I also decided to contact Shopify partner support. Their response was that my app wont be called with "customers/data_request" or "customers/redact" webhooks because it is a payments app. 

But I think I will add endpoints for those webhooks anyway, because what I have learned so far, things are subject to change.