VoxCart for WooCommerce

FAQ

Where do I get my API Key and Agent ID?

Both come from your VoxCart account at https://voxcart-ai.theonetechnologies.co.in. After signing in, your API Key is in the dashboard’s API/credentials area, and the Agent ID is the identifier of the workflow/agent you created. Paste these into WooCommerce → VoxCart → Settings — the service URLs are already pre-filled for you.

How does the voice connection actually work?

When a visitor clicks the call button, your WordPress server (not the browser) asks the VoxCart API to create a session, using your encrypted API key. Only a short-lived, single-use session token is returned to the browser. The browser then opens a secure WebSocket (wss://) straight to the VoxCart platform using that token, and audio is streamed over that connection. Your API key and embed token never reach the visitor’s browser.

Does my host need to support WebSockets?

No. The WebSocket connection is opened from the customer’s browser to the VoxCart platform — not from your PHP server. Standard shared hosting works fine.

Where is my API key stored?

The API key is encrypted (AES-256-GCM) in the WordPress database, with the encryption key derived from your site’s AUTH_KEY salt. It is never printed in page source, localized to scripts, or returned by any REST response.

Is voice data stored?

The plugin does not store any audio inside WordPress. Inside WordPress it stores only structured event data (order IDs, product IDs, customer IDs) in a local queue table for agent context.

The VoxCart platform, however, does record and store the conversation audio (WAV recordings) and transcripts on its own servers, so that you can review calls and so the AI service can function. Because voice is personal data, you should disclose this to your customers. Retention and handling are governed by the VoxCart Privacy Policy: https://voxcart.theonetechnologies.co.in/privacy

Do I need to update my privacy policy?

Yes. You should disclose to your customers that voice interactions are processed by VoxCart (TheOne Technologies). Voice is personal data under GDPR. A sample disclosure: “Our store uses a voice AI assistant provided by TheOne Technologies (VoxCart). Voice interactions are processed by their platform. See [VoxCart Privacy Policy].”

What WooCommerce events are forwarded to the agent?

Orders (created, updated, completed, cancelled), products (created, updated, deleted), and customers (registered, profile updated). Each event type can be toggled independently in Settings.

What happens if VoxCart is unavailable or the store has no balance?

The plugin returns a 402 status when the store’s VoxCart subscription is inactive or has insufficient balance. The voice widget silently hides itself so customers never see a broken call UI. A wwsa:widget_unavailable DOM event is dispatched so themes can react (e.g. hide a “Talk to us” button).

Can I restrict the widget to specific pages?

Yes. Add a filter in your theme’s functions.php:

add_filter( 'wwsa_load_widget', fn() => is_woocommerce() || is_cart() || is_checkout() );

How do I uninstall cleanly?

Go to Settings → Diagnostics and enable “Delete all plugin data on uninstall”, save, then delete the plugin. All tables, options, and encrypted credentials will be removed.