The refund failed. Nobody told you.
Your admin says the refund happened. The payment that fulfils it is a separate record — and when that one fails, nothing tells you. You find out when the customer does.
- Reads the record nobody else reads. Every refund has a payment transaction behind it. We watch that one, and tell you when it fails, stalls, or was never created.
- One alert per problem. Not one per check. An exception has a lifecycle — new, acknowledged, resolved — so you hear about a change, never about the same failure again.
- Read-only, and no customer data. Only
read_orders, nothing on your storefront or in checkout, and no customer names, emails, addresses or phone numbers are ever read.