AI Chatbot for Webshops: Order and Return Questions
By CodexierPublished 6 min read
A chatbot that only knows your FAQ page cannot tell a customer where their parcel is. The value in e-commerce comes from connecting the bot to order, tracking and return data, and that connection is also where the risks sit. This guide covers what to connect, how to handle the Swedish right of withdrawal, how to check identity before revealing anything, and when a human must take over.
The questions that fill a webshop inbox
Look through a month of support email in almost any small webshop and the same pattern appears: where is my order, can I change the address, how do I return this, when do I get my money back, and the product arrived broken. The first four are lookups against data you already have. The fifth needs judgement. A well-built chatbot handles the lookups instantly, at any hour, and routes the judgement cases to you with the facts already collected.
The mistake is starting with the language model. Start with the list of questions, the system that holds each answer, and what the bot is allowed to do about it. That list becomes the specification for the integration.
Connecting order and tracking data
Shopify and WooCommerce both expose orders through an API, and the Swedish carriers most shops use, such as PostNord, DHL, Budbee and Instabox, provide tracking events either directly or through a shipping platform. The bot should call these as tools: look up an order, read its fulfilment status, fetch the latest tracking event. It should never invent a delivery date.
| Customer question | Data source | What the bot may do |
|---|---|---|
| Where is my parcel? | Order status + carrier tracking | Show status, latest event and tracking link |
| Can I change my address? | Order status | Accept only before fulfilment; otherwise explain carrier redirect options |
| How do I return this? | Order date + return policy | Check the window and start the return |
| When is my refund coming? | Return and payment status | Report status; never promise a date the payment provider controls |
| The item is broken | Order lines | Collect photos and details, then hand off |
Keep the access read-only wherever possible. If the bot must write, for example to register a return, give it one narrow action rather than broad admin rights. We cover how to stop a bot from improvising answers in our guide to chatbot hallucinations.
Returns and the 14-day right of withdrawal
Under the Swedish Distance Contracts Act, consumers can withdraw from most online purchases within 14 days of receiving the goods, without giving a reason. The bot can check the delivery date, confirm the customer is inside the window, issue a return label and tell them the refund rules: you must refund within 14 days of the withdrawal, but you may wait until the goods are back or the customer shows they have been sent.
- Exceptions matter: sealed hygiene products once opened, custom-made goods and perishables are not covered. Put them in the bot's rules explicitly.
- If your own return policy is more generous, such as 30 days, the bot should apply your policy, not the legal minimum.
- A withdrawal is not a complaint. A faulty product falls under the Consumer Sales Act with up to three years to complain, and that is a human case.
For the full picture of the consumer rules, see distance selling rules in Sweden.
Identity checks before sharing order info
An order record contains a name, an address and what someone bought. Handing that to anyone who types an order number is a personal data breach under GDPR. The simple rule: two factors that only the buyer should know, typically the order number plus the email address or postcode on the order.
- Ask for the order number and email together, and only confirm a match or no match.
- Never read out the full delivery address; show the town or the last characters at most.
- Limit failed attempts per conversation to stop guessing.
- If the customer is logged in on your site, use that session instead of asking again.
- Log what the bot disclosed, so a complaint can be investigated.
Hand-off for complaints, and when you do not need this
Complaints, damaged deliveries, chargebacks and anything involving money beyond a standard refund should go to a person. The bot's job is to collect the order number, photos, a description and the customer's preferred contact, then create a ticket so you do not have to ask again. An angry customer who gets a fast, informed human reply is often easier to keep than one who argued with a machine.
When not to buy this: if you ship a handful of orders a day, a good order-status page, automatic tracking emails and a clear returns page will remove most questions at almost no cost. A connected chatbot makes sense when order questions take real hours every week, or when customers write outside office hours and expect an answer. Our AI chatbot setup is built for that case; if you are unsure which side you are on, book a short call and bring a sample of your inbox.
Frequently asked questions
Can the chatbot issue refunds by itself?
It can, technically, but we advise against it beyond the simplest case. Let it register the return and report the refund status; the actual refund should follow your normal check that the goods have come back.
Does it work with Shopify and WooCommerce?
Yes. Both have order APIs the bot can call. Tracking comes from the carrier or your shipping platform. Custom or older platforms need an integration check first.
Is it allowed under GDPR to let a bot read order data?
Yes, when it is needed to answer the customer and you control what it discloses. Use a provider with a data processing agreement, keep data in the EU where possible, and verify identity before showing any order details.
What happens if the bot cannot answer?
It should say so plainly, collect the details and hand the case to a person with a ticket or email. A bot that pretends to know is worse than no bot.
Want a bot that answers from your real order data?
Bring a week of support email to a short call. We will tell you which questions a connected bot can answer safely, what it needs access to, and whether it is worth building for your volume.
Book a free 15-minute call