Grounded Order Edits gives customers a controlled self-service window after checkout while merchants decide what can be changed, when editing closes and which orders remain protected.
$29/month or $290/year · 14-day free trial · Unlimited orders · Every feature included
None of these are hard problems. They're just problems that can only be solved by a human reading an email, opening the Shopify admin, and hoping the warehouse hasn't already picked the order.
Customer editing is switched off on a new install. Nothing is editable until you decide what should be.
Choose the editing window, which actions customers may take, which orders qualify, what needs your approval, and what is excluded outright.
From the order status page or Shopify customer accounts, a signed-in customer sees their live editing deadline and only the actions you allow for that specific order.
The request is re-checked against the live Shopify order — eligibility, fulfilment state, stock, price and your rules — before anything is committed. Anything uncertain fails closed and stays visible to you.
Every action below is individually enabled by the merchant. A customer only ever sees what is both switched on and genuinely possible for their order right now.
Shipping address changes are normalised and validated before they are saved, and the order's email and phone number can be corrected. Optional address validation shows the customer a suggested correction and can warn or block on your own rules — destination, postcode ranges, PO boxes, missing street numbers, length and order value.
Customers can swap to a different variant of the same product, replace an item with a different approved product, change a quantity, remove a line, or add from a curated list. Replacements are searched against a catalogue you control, with live price, stock and product-status checks applied server-side at both request and approval time.
Customers choose from shipping options you define and target by country and currency. The replacement is calculated through Shopify's own order-edit pricing, and can be reversed.
A calendar in the customer account, bounded by your lead time, advance window, operating weekdays and blackout dates in your own timezone. The date is written to a Shopify order attribute you nominate, so warehouse and automation workflows can read it.
Build up to twenty customer-facing fields — gift messages, delivery notes, personalisation, custom attributes and the Shopify order note — with required, multiline and length controls. Attributes you didn't expose are preserved untouched.
Cancellation requires an explicit customer confirmation, and you decide the refund destination: back to the original payment method, to native Shopify store credit, or let the customer choose. The choice is enforced server-side and recorded.
Signed-in customers can download a branded A4 PDF generated from the order's current state — after edits, returns and refunds — with your legal name, tax label, contact details and accent colour.
The editing entry point appears on the order status page and inside Shopify customer accounts. Full editing requires the customer to be signed in and to own the order. These are Shopify app extensions — there are no theme files to edit and no code to paste into your storefront.
The customer-facing surfaces ship in English, French, German, Spanish, Italian, Dutch and Brazilian Portuguese, with safe fallback and localised currency formatting. Default and per-locale copy is yours to edit.
The default answer is no. Every action a customer sees has to survive your rules and the live state of the order — and anything the app cannot verify fails closed rather than guessing.
Target rules on order state, risk level, order and product tags, payment gateway, country, currency, subscriptions, product status and order value — as compound any/all conditions.
You set the editing window. The live deadline is shown to the customer, and they can close their own session early so fulfilment resumes immediately.
Each action — address, contact, items, quantities, shipping, delivery date, notes, cancellation — is enabled independently, and can be allowed, denied or sent for approval by rule.
Replacement products come from a tag-gated catalogue by default. Global order-tag, product-tag and gateway exclusions hard-block anything you never want touched.
While an order is editable the app holds its open, scheduled and on-hold fulfilment orders, with an optional order tag for tag-driven warehouse and 3PL imports. Holds release only after payment is safe — the warehouse tag last.
Anything you route to approval waits in a queue with approve and reject actions, revalidation against the order's current state, and a record of who acted.
Code-based, automatic and manual order discounts are detected from live Shopify totals. Discount-sensitive item and shipping edits default to your approval, and can be preserved or blocked globally.
Duplicate, partially fulfilled and bundle-component lines are detected and refused before a mutation can break them.
Most of the engineering in this app is not the editing. It's what happens to the money, the fulfilment hold and the audit trail when an edit succeeds, fails, or ends in an uncertain state.
The difference is refunded with exact decimal allocation across the order's eligible original transactions, verified against Shopify's complete payment history and any prior refunds.
Shopify's order-edit invoice collects the added balance. Fulfilment stays gated until it's paid, and an unpaid edit that expires is automatically reversed — lines and shipping restored.
Every customer change leaves an immutable audit record and a durable mutation journal, with an Operations view for stuck edits, failed deliveries and money-flow recovery.
Shopify sends its own invoice notification when an edit adds a balance, and notifies the customer when an order is cancelled. Your systems can be notified through signed HTTPS webhooks.
Daily rollups of edits, failures, approvals, delivery-date changes, early editing completions, cancellation and store-credit selection, refunds, an estimate of tickets deflected, and fulfilment minutes saved against the original deadline. CSV export included.
If a Shopify mutation's outcome is ever unknown, the app locks the order, raises an incident and reconciles rather than silently retrying an irreversible action.
Installation, sessions and access tokens are Shopify-managed. Full editing requires a signed-in Shopify customer account and exact ownership of the order — a request for someone else's order returns the same not-found response as an order that doesn't exist.
Nine Shopify scopes, each tied to a specific job. Granted scopes are reconciled with Shopify, and a missing permission pauses the store fail-closed rather than degrading silently.
Risk assessments, gateways, discount codes, tags, policy internals, SKUs and inventory never appear in customer-facing responses. Those responses are no-store, and logs redact tokens, addresses, emails, phone numbers and names.
Shopify's mandatory data-request, customer-redact and shop-redact webhooks are implemented with durable processing and a merchant-accessible export.
Per-customer and per-order read and mutation budgets, production fail-closed rate limiting, hashed identifiers and encrypted integration credentials.
Every feature on this page is in the plan. There is no starter tier with the safety features removed, and no meter that turns a good month into a bigger bill.
Prices are in USD. Plan selection, the free trial, renewal and cancellation are all handled by Shopify's own app billing and shown to you before you accept a plan. Charges already incurred aren't refunded except where the law requires.
Order-editing software should save support costs, not introduce another bill that rises whenever your store succeeds.
Grounded Order Edits is built by Grounded Carts — a Shopify studio focused on clearer shopping journeys, practical merchant operations and founder-led ecommerce brands. This app exists because the same post-checkout problems kept turning up in other people's stores, and in our own.
Only what you enable: the shipping address, order email and phone, item variants, quantities, item removal, replacement of an item with an approved product, curated additions, the shipping method, a requested delivery date, merchant-defined note and gift-message fields, and a cancellation request. Each is switched on independently, and each request is re-checked against the live order before it's applied.
You set the editing window, and the live deadline is shown to the customer. Rules can shorten or remove eligibility for particular orders. Customers can also close their own editing session early, which releases the fulfilment hold immediately instead of waiting for the deadline.
No. While an order is editable the app holds its open, scheduled and on-hold fulfilment orders so it can't be picked mid-edit, and edits that would touch a partially fulfilled line are refused before any mutation runs. Your eligibility rules can also exclude orders by state outright.
If your warehouse or 3PL imports orders by tag rather than through Shopify's fulfilment holds, the app can add a configurable tag for the editing window and remove it last, after payment is confirmed safe.
If the total goes down, the difference is refunded with exact allocation across the order's eligible original transactions, verified against Shopify's complete transaction history and any earlier refunds.
If the total goes up, Shopify's order-edit invoice collects the balance. Fulfilment stays protected until it's paid, and if the added payment isn't completed before the window expires the edit is automatically reversed — lines and shipping restored to their previous state.
Yes. Global product-tag and order-tag exclusions hard-block products or orders from customer editing. Replacement products come from a tag-gated catalogue you control by default, with per-rule exclusions on top and live product-status checks server-side. Bundle components are detected and refused.
Both. An entry point appears on the order status page, and the full editor runs inside Shopify customer accounts. Editing requires the customer to sign in with Shopify and to own the order — before login, the order status entry point reads only whether editing is available and for how long, never order contents or your rules. These are Shopify app extensions, so no theme files are modified.
The customer sees the outcome of their change in the editor as it happens. Where Shopify owns the notification it sends it: its order-edit invoice when a change adds a balance to pay, and its cancellation notification when an order is cancelled. On your side, edit events can be delivered to your own systems over signed HTTPS webhooks.
No. The plan is a flat subscription with unlimited orders, no per-order cap and no overage charge. Growing your order volume doesn't change the price.
The plan includes a 14-day free trial. Plan selection, the trial, renewal and cancellation all run through Shopify's own app billing, and Shopify shows you the exact price, trial length and any taxes before you accept. You can cancel from your Shopify admin; access continues until the cancellation date Shopify shows, and charges already incurred aren't refunded except where the law requires.
Email richard@groundedcarts.com from an address associated with your store, with your permanent .myshopify.com domain, the order number, and the time and timezone. For anything involving a stuck fulfilment hold or an uncertain payment, check the app's Operations page before retrying — never repeat an irreversible edit, refund or cancellation until the live Shopify order has been checked.
Shopify remains the system of record. The app stores what it needs to authorise a customer, apply an edit and reconcile the result — and deliberately keeps risk scores, gateways, discount codes, tags, SKUs and inventory out of every customer-facing response. Customer identifiers in audit and analytics contexts are stored as keyed HMACs rather than raw values, integration credentials are encrypted, and logs redact tokens, addresses, emails, phone numbers and names.
No card, bank or reusable payment credential ever enters the app. Shopify's mandatory data-request, customer-redact and shop-redact webhooks are implemented with durable processing and a merchant-accessible export.
Merchant support, the privacy policy and the terms of service are published with the app itself, at its own address, and go live with the listing. Until then, email richard@groundedcarts.com. The Grounded Carts privacy page covers this website.
The Shopify App Store listing isn't published yet. Email richard@groundedcarts.com and we'll tell you the day it is.
Launching soon on the Shopify App Store All apps by Grounded Carts