Quick-action links & webhooks

WallaB.AI™'s shopper emails (payment notices, win-back offers, lifecycle messages) can carry quick-action links — one-tap subscription actions that work without a portal session. If you build integrations or custom email flows around WallaB.AI, this is how those links behave.

#Token model

• Each link carries a 43-character, URL-safe, cryptographically random token. Only a hash is stored server-side; the plaintext exists only in the email itself.
• Single-use: redemption is atomic — a link can never be redeemed twice, even by two simultaneous clicks.
• Expiring: 30 days by default (up to 365 when minted for a specific campaign).

#Supported actions

• skip_next — skip the subscription's next billing cycle.
• resume — reactivate a paused subscription.
• pause_1m — pause for one month.
• one_off_purchase — add a specific one-time item to the next delivery. It's billed and shipped with that delivery, not charged when the link is confirmed (pay-as-you-go subscriptions only).

#Peek before commit

Opening a link never performs the action. The landing page first shows what the link will do — the action, the subscription, the store, the relevant dates, and the item and price for one-off purchases — and only a explicit confirmation performs it.

#Outcomes

A redemption resolves to success (with the action's effect — e.g. the new next-billing date, or the item queued onto the next delivery) or a specific failure: invalid, expired, already_used, or not_applicable (the subscription's state no longer allows the action). Failed redemptions never leak information about other subscriptions or shops.

#Webhooks from your store

WallaB.AI consumes Shopify webhooks (orders, customers, GDPR) with HMAC verification and idempotent processing on our side; it does not currently publish outbound webhooks to arbitrary URLs. For system-to-system checks, use the entitlements API; for event fan-out to Shopify Flow or Klaviyo, see Integrations.