Bozor Bot

Description

Bozor Bot adds a chat window to your store that answers visitor questions from
your own catalogue and pages: it recommends products you actually sell, with
the price and stock from your store, and answers delivery, returns and payment
questions from your own policy pages.

When it cannot answer, it says so rather than inventing something, and the
question is added to a list in your dashboard so you can write the answer once.

Bozor Bot is a hosted service. This plugin connects your site to it and
adds the chat window; the answering happens on Bozor Bot’s servers. You need a
free Bozor Bot account to use it — see “External services” below for exactly
what is sent and when.

What the plugin does

1. Lets Bozor Bot read your published products, pages and posts over a signed,
   authenticated connection.
2. Adds the chat widget to your site. No theme editing, no script tags to paste.

Features

• Product recommendations with prices and stock taken from your catalogue,
  never written by the AI.
• Answers about delivery, returns, warranty and payment from your own pages.
• A list of questions it could not answer, so you can fill the gaps.
• Conversation transcripts and analytics in your dashboard.
• Replies in the language the shopper writes in; the widget interface is
  available in English and Russian.
• A small widget (under 15 KB) loaded asynchronously, so it does not slow your
  pages down.

Plans

There is a free plan with no card required. Paid plans with higher limits are
listed at bozor-bot.com.

Security

• Requests between your site and Bozor Bot are signed with HMAC-SHA256 and
  cover the method, path, timestamp, a single-use nonce and the body, so a
  captured request cannot be replayed or altered.
• The shared secret stays in your database and is never sent to the browser.
  Only the public site key appears in page source.
• Only published content is shared. Drafts, private posts, orders and customer
  data are never read.

External services

This plugin connects to Bozor Bot, a hosted AI shopping-assistant service
operated by the plugin author. The plugin does nothing useful without it.

• Service: Bozor Bot — https://bozor-bot.com
• Terms of Service: https://bozor-bot.com/terms.html
• Privacy Policy: https://bozor-bot.com/privacy.html

What is sent, and when:

• When you connect the site (Settings > Bozor Bot > Connect): the pairing
  code you enter and your site’s home URL are sent to api.bozor-bot.com. The
  service returns this site’s credentials, which are stored in your database.
• When you open Settings > Bozor Bot on a connected site: a signed request
  to api.bozor-bot.com checks the connection still works. It carries no
  content.
• When Bozor Bot syncs your store: the service calls this site’s
  /wp-json/bozorbot/v1/export endpoint, which returns published products
  (name, link, SKU, price, currency, stock status, description, image URL,
  categories, attributes) and published pages and posts (title, link, text).
  Every request must carry a valid signature; anything else is refused.
• On every front-end page, while the widget is enabled: the visitor’s
  browser loads the chat widget script from Bozor Bot’s servers, along with
  this site’s public key and locale.
• When a visitor uses the chat: their message, the page they are on, their
  browser language and a random identifier generated in their browser are sent
  from their browser to api.bozor-bot.com to produce an answer. Conversations
  are stored so you can review them, for as long as you choose in your
  dashboard. No cookies are set and IP addresses are not stored against
  conversations.

The plugin adds suggested wording for your own privacy policy under
Settings > Privacy > Policy Guide, which you can copy into your policy.