Privacy panel

Replenish Autopilot

Your cart runs itself | only you can see what it knows.

Your next refill

Loading your refill plan…

Getting everything ready

A new spending permission is needed before Replenish can place an order.

Demo mode: creates a Shopify test order. No money is charged.
  1. 1
    Check what's low

    Uses your refill schedule.

  2. 2
    Compare shops

    Looks for a suitable price.

  3. 3
    Apply your limits

    Only orders when every rule passes.

You stay in control

Your safeguards

These boundaries are enforced before Replenish can buy anything.

Access

What Replenish can see

0 allowed

No categories are shared.

Click any category to toggle what the agent can see.

Spending

Your purchase limit

Paused
Automatic spending is off

Replenish cannot place an order.

Data kept to a minimum

What Replenish knows

Only the information needed to predict your next refill.

No products are being watched

There is no refill data stored for this account.

That's the whole record. No profile, browsing history, or full purchase history.

Trust & Credential Boundaries

How Grok Bot interacts with Replenish

The agent never holds store admin keys, server secrets, or unconstrained spending authority.

Client & Agent

Grok Bot

Autonomous Reordering Agent

Credentials HeldScoped User JWTBearer token · user-scoped RLS
  • ✓ Reads due refill signals via /api/signal
  • ✓ Compares live retailer prices via /api/compare
  • ✓ Attempts orders strictly inside spending permission
  • × No Shopify admin token or store secrets
  • × Cannot spend if cap exceeded or revoked
Security Guardrail

Replenish Trust Engine

Server-Side Policy & Audit Layer

Protected SecretsServer-Only CredentialsShopify Admin Token · Service Role
  • ✓ checkToken() policy engine evaluates cap & category
  • ✓ Explains decisions via xAI API (no spend authority)
  • ✓ Enforces instant one-tap revoke server-side
  • ✓ Writes unforgeable audit log to Supabase
  • ✓ Routes test order directly to Shopify Dev Store
Security Architecture

The bot operates as an untrusted client holding only your revocable session token. Even if the agent hallucinates or is prompted to overspend, the server-side guardrail denies the order.

Clear and accountable

Recent activity

A simple receipt for every price check, order, or block.

No activity yet

Your checks and orders will appear here.

Your data is protected by row-level security. Other accounts cannot see it.