ReturnRabbit requests following permissions from merchants. Here's a brief description of what permission is needed for what: