Shopify Acceptable Use Policy

This policy sets out the rules merchants must follow to use Shopify, covering what they can sell, how they must behave, and what conduct is prohibited. Key limits include a ban on fraud, spam, violence threats, and products that facilitate self-harm, and Shopify will not support uploading health data regulated by HIPAA. Shopify generally acts against individual products first and takes action against an entire account only as a last resort.

Shopify's Acceptable Use Policy establishes the substantive obligations merchants must satisfy to use the platform, binding them contractually to Shopify's own rules, partner terms, and all applicable law in the jurisdictions where they operate. It prohibits a defined set of conduct including fraud against Shopify, other merchants, or buyers; spam and other malicious practices; calls for or threats of violence against specific people or groups; and the sale of products that facilitate intentional self-harm. The policy further excludes specific data categories from the platform entirely, notably Protected Health Information subject to HIPAA. Enforcement defaults to the product level, with account-level action reserved as a last resort when appropriate, and Shopify commits to providing notice and self-management tools when appropriate rather than as a universal guarantee.

As a merchant using Shopify, you are legally bound to follow Shopify's rules, the terms of any partners whose services you use, and the law wherever you do business. You cannot sell products that facilitate intentional self-harm, upload Protected Health Information to the platform, commit fraud against Shopify or other users, send spam, threaten violence against specific people or groups, or attempt to circumvent platform constraints. If Shopify identifies a problem, it will typically address the specific product first rather than your entire account, and when appropriate it will give you notice and tools to address issues yourself.