Can an app fetch a size chart from a URL the merchant pastes (API Terms 2.3.8 / 6.1.1)?

Dev Platform App Security
1

Our public app lets a merchant import a size chart. Next we want “import from URL”: the merchant pastes one URL, our server fetches that single page once (no crawling, no bypassing bot protection), and we show the size table for the merchant to review. Only measurements are imported, and the merchant confirms they own the content.

2.3.8 forbids scraping “any Merchant Store”, and 6.1.1 forbids access without the merchant’s authorization. So:

  1. The merchant’s own store (the one that installed our app): may we fetch its public storefront page, or must we use the Admin API only?
  2. Another merchant’s Shopify store: is a single fetch of a public page, started by our merchant, allowed? Or should we block Shopify-hosted URLs other than the merchant’s own?
  3. Non-Shopify websites: any App Store or BFS rule against this?

Thanks!