Most wholesale buyers don’t have a Shopify customer account on your store — they just send POs and pay invoices. Asking them to “log in to your storefront” to upload a resale certificate is friction that kills adoption.
The magic-link upload flow lets you email a unique, single-use upload link to any customer. They click it from any browser, fill the form, sign, and submit. No login, no setup.
When to use it
- A new wholesale buyer needs to send you a cert before their first order
- An existing cert was rejected and you want them to try again
- A cert expired and the buyer hasn’t logged into your storefront in a while
- You imported a CSV of customers and want to ask them all for fresh certs
How it works
- Open a certificate in Certificates → [select a row].
- Look for Request a fresh upload in the right column.
- Click Email upload link — it sends to the email already on the cert.
- The customer gets a branded email with a single button. Clicking it opens a public upload page (no Shopify login). They pick state, type permit number, drop in a PDF, sign, submit.
- The new certificate lands in your queue with status Pending and source Magic-link upload — review it like any other cert.
Bulk send
On the Certificates list, select multiple rows and click Email upload links to N. Each selected cert’s customer gets their own link.
Security
- Each link is a 256-bit random token, sha256-hashed at rest. Anyone with the link can submit ONE certificate to your store; the link is invalidated immediately after use.
- Links expire 7 days after issuance. If a customer misses the window, just email them a fresh link.
- The magic-link flow auto-creates a Shopify customer record (tagged
resaleproof-magic-link) if the email doesn’t match an existing customer. The customer record is created with name only — Shopify’s Protected Customer Data approval gate prevents the email from being written to Shopify, but the cert row in Resale Proof carries the email separately so you always have it for follow-up.
What customers see
- Your branded email (logo, accent color, sender name) with a single primary CTA button.
- A clean upload form on the link page — no Shopify chrome, no login, no account creation. About 90 seconds to fill.
- A “thanks, your certificate is in” confirmation page after submit, plus a confirmation email to the address on file.
What happens after submit
The cert lands in your Pending queue exactly like a portal
submission. Review it, approve or reject — the standard
customerAddTaxExemptions flow then applies the per-state exemption
to that customer’s future checkouts.