Permissions & scopes

Summer Upsell requests the minimum scopes needed for each feature. No customer PII is read or stored.

Scope	Used for
read_products	List products and variants in campaign builders.
write_products	Create the synthetic products used by Bundle / FBT discounts.
read_discounts	List existing discounts in the admin to avoid conflicts.
write_discounts	Create Shopify Function discounts for upsell offers.
read_themes	Detect the active theme to show install hints.
write_app_proxy	Register the /apps/pars-upsell proxy used by the storefront widget runtime.
read_markets	List market locales for translation overrides.
read_locales	List shop locales for translation overrides.

We don't request read_customers, read_orders (we only listen to webhooks), or any payment/financial scopes.