Granting permissions in Stripe can look intimidating at first. The access we request is limited to what’s necessary for referral tracking and commission automation, and it does not give Rewardful control over your funds or financial operations.
What Rewardful Cannot Do
Here’s exactly what that access does (and doesn’t) allow.
Rewardful cannot:
Move or withdraw money from your Stripe account
Issue refunds to customers
Change your bank account details
Edit your product pricing or subscription amounts
Cancel or modify subscriptions
Access your Stripe password or login credentials
See or store full credit card information
Rewardful does not have access to your funds and cannot control or initiate payments.
Stripe handles all financial activity, including charging customers, processing refunds, and sending payouts. Rewardful simply reads the information needed to track referrals and calculate commissions accurately.
The only updates we make in Stripe are metadata updates for tracking purposes and creating promo codes when that feature is enabled.
A note about “Modify” permissions
You may notice that some Stripe permissions are labeled as “Modify.” That does not mean Rewardful can change your pricing, issue refunds, or move funds.
In practice, “Modify” access simply allows us to:
Create coupons in Stripe when coupon tracking is enabled
Update metadata for referral tracking
Automatically generate and sync affiliate promo codes
These updates are strictly related to tracking and attribution, not financial control. All pricing, billing logic, refunds, and payouts remain fully managed by you inside Stripe.
What Each Permission Is Used For
Now that we’ve clarified what this access does not allow, here’s how each permission is used in practice.
Accounts and User Information
This permission is required to properly connect and maintain the Stripe integration, ensuring the account is correctly identified and synchronized.
Promotion Codes and Coupons
These permissions are required for our coupon tracking feature. With coupon tracking, coupons can be created directly in Rewardful, allowing referrals to be tracked without the need for affiliate links. When a coupon is added to a campaign, Rewardful creates it directly in Stripe. Additionally, when an affiliate is created or when a new promo code is added to an existing affiliate, we automatically generate unique promo codes in Stripe for proper tracking.
Invoices, Subscriptions, Charges, and Customers
These permissions are essential for automatic referral and payment tracking. We read these objects to detect the referral ID, and when it’s present, we update the metadata accordingly. This allows Rewardful to create the referral correctly and track both initial and future payments tied to that referral.
Events and Sessions
Access to events and sessions allows us to detect when new activity occurs related to referrals connected to affiliates. This ensures we can create referrals as soon as the required information becomes available and generate commissions for new payments in real time.
User Emails and External Access (Data Sharing)
These permissions allow Rewardful to create referrals using relevant customer information from Stripe and to calculate commissions accurately based on payment data.
All of these permissions work together to make referral tracking completely automated and reliable, so you don’t have to manually reconcile payments or track commissions yourself. Rewardful does not modify pricing, billing logic, payouts, or any financial data outside of metadata needed for tracking.