Shopify App Approval

Apps Third-Party Apps
1

Does HubSpot sign custom End Recipient Acknowledgement Forms (ERAF) for individual developers publishing on Shopify?

3

Hey @bridge,

Thanks for posting in the Community!

I’d like to tag in a few Community experts here to get their insight. @Anton, @alyssamwilie, and @EValdes - are any of you able to tag in here?

Shane, Senior Community Moderator

4

From what I’ve seen, HubSpot doesn’t typically sign a custom ERAF (End Recipient Acknowledgement Form) specifically for individual Shopify app submissions.

In most cases, they rely on:
• Their standard terms of service / developer agreements
• Public API & app usage policies
• And platform-level compliance handled through the app ecosystem

If Shopify is requesting an ERAF, it’s usually about confirming how user data is handled (especially for integrations touching customer data).

:light_bulb: What You Can Do Instead:

• Check if Shopify accepts standard HubSpot legal docs as a substitute
• Reference HubSpot’s data processing & privacy documentation
• Clearly document your app’s data flow and permissions (this often satisfies review teams)

:warning: Practical Insight:

Most developers don’t go the custom ERAF route unless:

  • They’re a large partner
  • Or working on enterprise-level integrations

For individual developers, approval usually depends more on:
:backhand_index_pointing_right: Data handling transparency
:backhand_index_pointing_right: Permission scope
:backhand_index_pointing_right: Compliance with Shopify + HubSpot policies

:speech_balloon: Curious:

Is Shopify explicitly asking for a signed ERAF from HubSpot,
or just a confirmation of end-recipient data handling?

That detail might change the best approach :+1:

5

Hi @bridge, Same pattern as other Klaviyo/third-party integration cases: Shopify’s ERAF requirement typically applies when your app connects Shopify merchant data to another platform’s API (HubSpot, Klaviyo, etc.), and Shopify wants that other platform to formally acknowledge receiving/handling that merchant data. This isn’t something individual developers can resolve on their own it needs someone from HubSpot’s actual partnerships/legal team to sign off, and the community here won’t have that contact.

Best move is to reach out via HubSpot’s Developer Support or Partner API team directly (not this forum) that’s who Shopify’s reviewer will expect to sign it, similar to how Klaviyo developers had to get their partnerships team involved rather than finding an answer in-community.