WPXpert Payment Gateway for SimplePay

Description

Card payment via the SimplePay v2.1 API. The customer is redirected to the SimplePay payment page; card details never reach the shop and are never stored there.

Current main features:

• A WooCommerce payment method under the payment settings.
• Sandbox and live systems, test mode on activation.
• A separate merchant account per currency (HUF, EUR, USD) — the order’s currency selects the right one.
• Starting the payment (start) and redirecting to the SimplePay payment page.
• Receiving, authenticating and properly acknowledging the IPN; this is what marks the order as paid.
• Full and partial refunds from the WooCommerce refund flow (refund).
• Manual transaction status query from the order screen (query).
• Displaying the mandatory data transfer statement at checkout, with the configured company details.
• Clone detection: if a live database ends up on another host, every outbound call pauses until someone decides what this site is.
• Controlled WooCommerce logging, with the secret key and signature masked.

Important notes

The IPN URL must be set up separately on every merchant account, in the SimplePay merchant interface — there is a separate account per currency, so a separate setting per currency. The URL is shown on the plugin’s settings page.

The customer’s return from the payment page (back) is for information only: the data arrives through the browser. Only the IPN, or a manual status query, financially marks the order as paid.

Two-step payment, card storage, recurring payment and wallet payments (Apple Pay, Google Pay) are not supported in this version.

External services

This plugin connects to SimplePay, the online payment service operated by
OTP Mobil Kft., to take card payments. This connection is required for the
payment method to work: without it no payment can be started, confirmed or
refunded.

Data sent, and when:

• Starting a payment (when a customer places an order with SimplePay
  selected): the order total and its currency, the order reference
  (orderRef), the customer’s email address, the customer’s full name
  (first and last name), the customer’s billing address (country, state,
  city, postcode, address lines 1 and 2) and phone number, the checkout
  language, the merchant account id and the shop’s return URL. The plugin
  then redirects the customer to the service’s hosted payment page. Card
  details are entered there and never reach this shop. The name, billing
  address and phone number are personal data.
• Refunding a transaction (shop owner action): the order reference
  and/or SimplePay’s transaction id (whichever is known), the currency
  and the refund amount.
• Re-querying a transaction’s status (shop owner action): the order
  reference and/or SimplePay’s transaction id (whichever is known). No
  amount or personal data is sent for a query.

Endpoints, depending on the configured mode:

• Test mode: https://sandbox.simplepay.hu/payment/v2
• Live mode: https://secure.simplepay.hu/payment/v2

Service provider: OTP Mobil Kft. Data handling notice:
https://simplepay.hu/adatkezelesi-tajekoztatok/