FullmetrixSync bot

FullmetrixSync is the connector of Fullmetrix, an e-commerce analytics platform published by HEHOCOM. The publisher's full details are available in the legal notice.

On the stores of merchants who have installed the Fullmetrix module themselves (WooCommerce, PrestaShop, Magento, Sylius), the bot reads orders, customers, products, categories, coupons, refunds and subscriptions to power that merchant's own dashboards.

This data is used solely to provide the service to that merchant. It is never republished, never used to train artificial intelligence models and never sold.

The bot only calls the endpoint exposed by the installed module:

It never crawls the store's public pages. The only exception is an occasional check of the cart and checkout paths that the merchant has declared in Fullmetrix.

Every request can be verified with the following:

• User-Agent: FullmetrixSync/1.0 (+https://fullmetrix.com)
• Web Bot Auth signature (HTTP Message Signatures, RFC 9421). Public key directory: https://fullmetrix.com/.well-known/http-message-signatures-directory
• Source IP address: 157.180.57.113
• Reverse DNS of that address: sync.fullmetrix.com

Every request also carries an HMAC signature computed with a secret unique to each store. Unless the merchant has installed and paired the module, the bot does nothing.

A full import runs when the store is first connected, followed by periodic incremental synchronizations that only fetch recent changes.

If your store is behind Cloudflare and synchronization fails, create an IP Access Rule with the Allow action for the address 157.180.57.113.

On the Free plan, a custom WAF rule does not bypass Bot Fight Mode. An IP Access Rule does.

For any question about this bot, write to [email protected]

To stop synchronization, uninstall the Fullmetrix module from your store's administration panel. The bot then no longer has access to any data.