Understanding Permissions

Understanding which permissions GoCart uses to access your Stripe Account

GoCart generates your e-commerce website based on the data you already have in Stripe. As such, the app needs to be able to access quite a bit of information to show your products and collect payments from your customers. Stripe is obviously very security minded, so each App must define exactly what they will be accessing and then get the user's permission to gain access.

Here is the breakdown of the permissions that GoCart needs:

  • Account and user information Import settings like business name
  • Secrets Create secure tokens to keep your account secure
  • PaymentMethods Create checkout forms for your customers
  • Customers Update customer data after a payment
  • Files Read your logo and icon files
  • PaymentLinks Create payment links for your customers
  • PaymentIntents Create checkout forms for your customers
  • Sessions Secure checkout forms for your customers
  • Products Read product data to display on your site
  • Accounts Keep track of which account is using GoCart
  • Plans Allow customers to purchase subscriptions
  • Events Listen for changes to your account settings
  • Mandates For processing payments
  • SetupIntents Keep track of which account is using GoCart
  • SKUs For keeping product data in sync
  • ExternalAccess So GoCart can show website data in Stripe

Some of these require each other. If GoCart is to create forms to collect payments, it needs to have the Sessions permission as well as PaymentIntents. If you have any subscriptions in your account, GoCart needs the Plans permissions and the Products permission.

If you have any questions about the permissions used by GoCart, please email us at contact@gocartapp.com and we'll be happy to explain how we use each permission.

If you aren't comfortable with the permissions, you can always uninstall the app from your Stripe account.

Guide last updated: June 05, 2025