How to run a Shopify order status chatbot without exposing customer data

• What can an order status chatbot safely tell a customer?
• How do you verify the customer before showing an order?
• Which way of answering order questions fits your store?
• What should the bot say when an order is late?
• When should the chat go to a person?
• Which setup should you choose?

A Shopify order status chatbot can answer order questions while you sleep. You’ll get plenty of them: only 34% of US orders arrived on the promised date in Stord’s 2025 mystery shopping study. Here’s what the bot can share, who it must verify and when you step in.

WISMO, short for where is my order, is the support label for these messages. Automating them is mostly a data question: what the bot can see, what it may show and who it shows it to.

What can an order status chatbot safely tell a customer?

Before the customer proves who they are, the bot should share only the items ordered, the order total, any discounts and the order status. That’s the same short list Shopify shows on an order status page nobody has verified yet, according to the Shopify Help Center.

Everything else stays back until verification: the customer’s name, shipping and billing addresses, payment method, shipping method and tracking number. Shopify applies the same limit to a shared link, so a forwarded order page can’t expose an address. Copy that line into your bot’s rules. If your chat shows more than Shopify’s own page does, it becomes a side door around Shopify’s protection.

After verification, the bot can only be as specific as your carrier data. With a carrier Shopify supports, the order status page shows a live status, such as Confirmed, On its way, Out for delivery, Delivered or Attempted delivery, plus the parcel’s location on a map. With a carrier it doesn’t support, the page shows a tracking number that links out to the carrier’s site and no status at all, as the Help Center explains.

That second case catches small stores out. If you ship with a regional courier, write the bot’s answer around the tracking link instead of promising a status it can’t read.

Split shipments need their own answer too. Shopify gives each partial fulfillment a separate section on the order status page, even when the parts travel with different carriers. Have the bot answer parcel by parcel: one delivered, one still on its way, each with its own tracking link.

Put together, the rules fit in three lines:

• Before verification, share the items, order total, discounts and order status.
• After verification, add the shipping address, shipping method, tracking number and carrier status.
• Never repeat payment details in chat, even to a verified customer.

How do you verify the customer before showing an order?

Ask for the order number plus the email address or phone number used at checkout. That’s the pair Shopify itself asks for once a guest’s no-login window closes, alongside the option to log in to an account, according to the Shopify Help Center.

The window is short on purpose. A customer without an account can open the order status page from the confirmation email for 3 weeks in the same browser, and for 2 weeks in other browsers, on up to 5 browsers, the Help Center says. In March 2024, Shopify announced on the Shopify Changelog that it was adding the login requirement to better protect merchant and customer information.

Your bot should be at least as strict. A chat window is easier to reach than a customer’s email inbox, since anyone on your site can type into it. Two details that only the buyer is likely to hold, checked together, are the minimum.

The pattern itself is old. When Shopify added automated order lookup to Shopify Chat in August 2020, customers typed their order number and email address and got back the fulfillment status of recent orders with a tracking or order status link, according to the Shopify Changelog. Merchants got a notification when a follow-up message needed more help.

Two habits make the check safer. If the details don’t match, don’t tell the customer which one was wrong, because that helps anyone guessing. Allow one more try, then offer a person.

Plan for shoppers who checked out with only a phone number. Shopify texts them the order confirmation but doesn’t text later order and shipping updates, which they only get by email if they opt in, per the Help Center. In the US, 56% of consumers prefer order updates by SMS, but only 12% of brands offer them, according to Stord’s 2025 research. Expect those customers in your chat, and let the bot accept the phone number as their second check.

Which way of answering order questions fits your store?

The right setup depends on how often your orders run late: a link to Shopify’s order status page covers on-time orders, a rule-based lookup adds answers in chat, and an AI agent handles the follow-up questions. Most stores can tell which group they’re in from a week of inbox messages.

A rule-based chatbot, one that follows fixed steps you set instead of reading the customer’s message, is the middle option. The table compares all three on what the customer gives and what they get back, based on the checks in the Shopify Help Center and the lookup flow in the Shopify Chat announcement.

Setup	What the customer gives	What the customer sees	Carrier status	Answers follow-up questions	Who handles a late order
Order status page link	Order number plus checkout email or phone, once the no-login window ends	Limited details until verified, full details after	Live with supported carriers, tracking link otherwise	No	The customer, by contacting you
Rule-based lookup	Order number plus email	Fulfillment status and a tracking or order status link	Through the tracking link	No, follow-ups go to you	You, after a notification
AI agent with order data	Order number plus email or phone	Status, tracking and the delay reason you’ve written down	Live where the store has it	Yes	The AI first, then a person

The short version: an order status link covers fewer cases than an AI agent, because it shows a status but can’t explain a delay or pass the customer to you.

Send customers to the order status page

The simplest setup is a saved reply or bot answer that links to the order status page and lets Shopify do the checking. It adds no new software, it uses Shopify’s own verification, and with a supported carrier it shows the live status and map described above.

The weakness is everything after the status. A customer staring at On its way for a week still has a question, and the page can’t answer it. They come back to your inbox, now annoyed.

Use a rule-based order lookup

A rule-based lookup asks for the order number and email, checks them against your store, and replies with the fulfillment status and a tracking link. It’s the same flow Shopify Chat used for its automated lookup, and its strength is predictability: it never improvises an answer.

It also can’t understand anything off the script. Tracking says delivered, the customer says the box isn’t there, and the bot replies with the same tracking link. Route every follow-up message to a person, and make sure someone actually gets the notification.

Connect an AI agent to your order data

An AI agent reads the customer’s message in plain language, looks up the order and answers the follow-up question too: why the parcel is late, which half of a split order arrived, what happens next. In LenoChat, for example, the AI agent can pull live order status through the Shopify integration, and the chat widget can show an order tracking card so customers check shipments without starting a conversation.

The catch is that an AI agent is only as accurate as what you’ve written down. If your delay policy, reship rules and refund timing aren’t in its sources, a weak setup will either guess or hand over constantly. Write those first, using a knowledge base that gives the AI accurate answers, and test the late and missing-parcel cases before your customers do.

What should the bot say when an order is late?

The bot should say what it knows, what happens next and when the customer will hear more, and that script needs to exist before the first late order. Delays are routine: in LateShipment.com’s 2025 holiday shipping report, up to 9% of US UPS and FedEx packages arrived late in ordinary months from January to October 2025, and even next-day and 2-day express services ran late up to 10% of the time.

A bad answer costs more than the delay. In Stord’s 2025 research, 85% of US consumers said a poor delivery experience would stop them buying from a brand again. A package arriving after the promised date was the top cause, and a delivery date that suddenly changed came second.

Recovery is where the bot earns its place. Only 26% of those shoppers would overlook a rare problem, and most said their loyalty depends on how fast and how well the brand fixes it, Stord found. Fast and specific beats friendly and vague.

A late-order reply should cover five things:

• The status the carrier reports, with the tracking link.
• The reason for the delay if you know it, such as a carrier backlog or a backordered item.
• A specific day the customer will hear from you, or should check back.
• What you’ll do if that day passes: reship, refund or have a person review it.
• A way to reach a person right now.

Don’t let the bot invent a new delivery date. A changed date was the second biggest cause of a bad delivery experience in the same Stord study, so one estimate you can stand behind beats two hopeful ones. If you don’t promise a delivery date at checkout, decide what late means for your store anyway. The bot needs a line to measure against, and 40% of the US brands Stord looked at gave no promise at all.

Holiday peaks are worse, so write these answers before the rush, not during it. LateShipment.com forecast that up to 12% of US UPS and FedEx packages would run late in the 2025 holiday season, up from the year before, in the same holiday shipping report.

When should the chat go to a person?

Pass the chat to a person when the order is lost, damaged, marked delivered but missing, past the date you promised, or when the customer asks for one. Those cases need judgment, a refund or a reship, and a bot that keeps answering them makes things worse.

Make the way out easy to find. In a Gartner survey of 5,728 customers, run in December 2023 and released in July 2024, 64% said they’d prefer companies didn’t use AI for customer service, and 53% would consider switching to a competitor if they learned a company planned to, Insurance-Canada.ca reported. Their top worry was that AI would make it harder to reach a person, ahead of job losses and wrong answers.

Many customers fear that GenAI will simply become another obstacle between them and an agent.

Keith McIntosh, senior principal in Gartner’s customer service and support research practice, as quoted by Insurance-Canada.ca

Hand over on these signals:

• Tracking shows delivered, but the customer says nothing arrived.
• The parcel arrived damaged, or with the wrong items inside.
• The order is past the date you gave, or tracking hasn’t moved in days.
• Verification failed twice.
• The customer asks for a person, or the message reads as angry.
• The customer wants to change the address or cancel the order.

Send the context with the chat: the order number, what the bot already said and what the customer was told to expect. A good handoff lets the customer ask for a person in their own words, passes the full chat history to whoever picks it up, and outside business hours collects an email and message instead of leaving them waiting. For the timing and wording of that moment, see how to get a chatbot human handoff right before the customer gives up.

Which setup should you choose?

Start with the order status link if your parcels ship with carriers Shopify tracks live and delays are rare. Move to an AI agent when late or split orders keep bringing customers back to your inbox, because that’s the gap the other two setups leave open.

A rule-based lookup sits between them. It suits a store that wants verified answers in chat at any hour but isn’t ready to write the policies an AI agent needs.

Order status page link. Best for stores whose parcels ship with carriers Shopify tracks live. Not for stores whose delays need explaining.

Rule-based lookup. Best for stores that want a verified status in chat around the clock. Not for stores where customers often ask why, not just where.

AI agent with order data. Best for stores with frequent delays, split shipments or questions that come after the status. Not for stores that haven’t written down their delay, reship and refund rules yet.

Whichever you pick, keep the same three rules: limited details before verification, a scripted late-order answer and a person one message away.