Connected Apps: Managing Third-Party Access to Your Account

AskBiz has a developer platform where outside developers can build apps and integrations that read data from a merchant's AskBiz account through the API. Before any of that data sharing happens, the developer has to send you — the account owner — a request, and you have to explicitly approve it. Once approved, that's called a connection, and it stays in place, working in the background, until you revoke it or the developer's access is removed.

This is separate from the data sources you connect yourself under Sources (Shopify, Amazon, QuickBooks, and similar). Those are integrations *you* set up so AskBiz can read *their* data. A Connected App runs the other way: it's a third-party developer's app reading *your* AskBiz data, with your explicit permission.

A developer sends you a link that opens a confirmation screen at developer.askbiz.co/connect/... — this is AskBiz's own developer-platform site, not a separate company. AskBiz does not email you this link itself; it comes from the developer, usually as a button inside their own app or website (something like "Connect your AskBiz account"). If you receive a link like this from somewhere you don't recognise, don't approve it until you've confirmed with the developer directly.

On the confirmation screen you'll see:

• The app's name and logo, if the developer has registered it (otherwise it just says "this app")
• A Verified badge next to the name if AskBiz has verified the business behind it — a separate programme from this connection request itself
• Exactly what access is being requested, in plain English — currently the only permission AskBiz apps can request is read-only access to your inventory (product names, stock levels, cost and sale prices)

You can untick any permission you don't want to grant before approving — you can only narrow what's requested, never grant more than the developer actually asked for. At least one permission has to stay ticked to continue. Choose Allow access to approve, or Decline to refuse — declining takes effect immediately and the developer gets nothing.

To see every app currently connected to your account, go to Settings → Privacy & data, and scroll to the Connected apps card. Each entry shows:

• The app's logo and name (or "A third-party app" if it wasn't registered under a named app)
• What it can access, in plain English (currently just "Reads your inventory")
• The date you connected it, if available

There's no separate "last used" timestamp shown here today — this list only tells you what's connected and what it can see, not how recently it's been used.

To remove an app's access, click Revoke next to it and confirm. This takes effect immediately: the app can no longer read your AskBiz data through the API, and it disappears from your Connected apps list.

Revoking is immediate and one-way. It does not:

• Notify the developer directly inside AskBiz — but if the developer has set up their own webhook alerts for connection events, their system may find out and act on it automatically. Either way, you won't see anything about this on your end.
• Delete data the app already retrieved before you revoked it — AskBiz can only control access going forward, not what a developer already stored on their side
• Block the developer from sending you a brand new connection request later — if you want to reconnect after revoking, the developer has to send a fresh request, and you approve it the same way as the first time

If you decline or revoke a request that turns out to be legitimate, just ask the developer to resend it.