Pryma Multi-Gateways for WooCommerce

Description

Pryma Multi-Gateways for WooCommerce is a comprehensive, all-in-one payment solution for WooCommerce stores. It enables merchants to accept payments from global and local providers securely.

Key Features:
* Gutenberg Ready: Full support for the modern WooCommerce Checkout blocks.
* Global Gateways: Stripe, PayPal, Paddle, FastSpring, Square, Mollie.
* Local Gateways: Razorpay (India), bKash & Nagad (Bangladesh).
* Crypto/Web3: Support for native tokens and USDC across major chains (Ethereum, Polygon, Solana, etc.).
* Multi-Currency: Automatic currency conversion for local gateways.
* Subscriptions: Built-in support for WooCommerce Subscriptions.
* Donations: Custom donation forms with support for PayPal and Crypto.

External Services

This plugin connects to the following external third-party services to process payments and fetch live data. These services are only invoked when the respective payment gateway is enabled and configured by the site administrator.

Stripe
Used to process card payments via Stripe Elements and the Stripe API.
– What is sent: Payment token, order amount, currency. No raw card data ever touches your server.
– When: During customer checkout when Stripe is the selected payment method.
– Service URL: https://js.stripe.com / https://api.stripe.com
– Terms of Service: https://stripe.com/legal
– Privacy Policy: https://stripe.com/privacy

PayPal
Used to process payments via PayPal Checkout (PayPal REST API v2).
– What is sent: Order amount, currency, PayPal payment token.
– When: During customer checkout when PayPal is selected.
– Service URL: https://api-m.paypal.com / https://www.paypal.com
– Terms of Service: https://www.paypal.com/us/webapps/mpp/ua/legalhub-full
– Privacy Policy: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

Paddle
Used to process software subscription and one-time payments via Paddle Billing v2.
– What is sent: Transaction ID, order amount, customer email on checkout.
– When: During customer checkout when Paddle is selected.
– Service URL: https://checkout.paddle.com / https://sandbox-checkout.paddle.com
– Terms of Service: https://www.paddle.com/legal/terms
– Privacy Policy: https://www.paddle.com/legal/privacy

Razorpay
Used to process payments for Indian customers via Razorpay Checkout.
– What is sent: Order amount, currency, Razorpay payment token.
– When: During customer checkout when Razorpay is selected.
– Service URL: https://api.razorpay.com / https://checkout.razorpay.com
– Terms of Service: https://razorpay.com/terms
– Privacy Policy: https://razorpay.com/privacy

Mollie
Used to process payments via the Mollie Payments API.
– What is sent: Order amount, currency, customer email on checkout.
– When: During customer checkout when Mollie is selected.
– Service URL: https://api.mollie.com
– Terms of Service: https://www.mollie.com/en/user-agreement
– Privacy Policy: https://www.mollie.com/en/privacy

bKash
Used to process mobile payments for Bangladeshi customers via bKash.
– What is sent: Order amount, phone number on checkout.
– When: During customer checkout when bKash is selected.
– Service URL: https://checkout.pay.bka.sh
– Terms of Service: https://www.bkash.com/terms
– Privacy Policy: https://www.bkash.com/privacy-policy

Nagad
Used to process mobile payments for Bangladeshi customers via Nagad.
– What is sent: Order amount, customer phone number on checkout initiation.
– When: During customer checkout when Nagad is selected.
– Service URL: https://api.mynagad.com / https://sandbox-api.mynagad.com
– Terms of Service: https://nagad.com.bd
– Privacy Policy: https://nagad.com.bd/pg/?n=privacy-policy

Square
Used to process card payments via Square Payments.
– What is sent: Card payment nonce/token, order amount, currency.
– When: During customer checkout when Square is selected.
– Service URL: https://connect.squareup.com / https://connect.squareupsandbox.com
– Terms of Service: https://squareup.com/us/en/legal/general/ua
– Privacy Policy: https://squareup.com/us/en/legal/general/privacy

FastSpring
Used to process software payments via FastSpring Storefront.
– What is sent: Product path, order number, customer session data.
– When: During customer checkout when FastSpring is selected. FastSpring loads its builder script directly from their CDN (d1f8f9xcsvx3ha.cloudfront.net) as required by their integration.
– Service URL: https://fastspring.com / https://d1f8f9xcsvx3ha.cloudfront.net
– Terms of Service: https://fastspring.com/terms-use/seller-terms-service/
– Privacy Policy: https://fastspring.com/privacy/

CoinGecko API (Crypto rate feed)
Used as a data source for cryptocurrency exchange rates.
– What is sent: Ticker symbol. No personal data is transmitted.
– When: On Web3 checkout pages.
– Service URL: https://api.coingecko.com
– Terms of Service: https://coingecko.com/en/terms_of_service
– Privacy Policy: https://coingecko.com/en/privacy

Blockchain RPC Nodes (Web3 transaction monitoring & fund sweeping)
The Web3 payment gateway communicates directly with public blockchain RPC endpoints to monitor incoming payments and, in HD-wallet mode, to broadcast fund-sweeping transactions. No personal customer data is transmitted; only blockchain-standard JSON-RPC payloads (transaction hashes, wallet addresses) are exchanged.

The following public RPC endpoints are used depending on which blockchain network the customer selects:

• Ethereum mainnet: https://cloudflare-eth.com (Cloudflare)
• Ethereum Sepolia testnet: https://ethereum-sepolia-rpc.publicnode.com (PublicNode)
• Polygon mainnet: https://polygon-rpc.com (Polygon Labs)
• Polygon Amoy testnet: https://polygon-amoy-bor-rpc.publicnode.com (PublicNode)
• Avalanche C-Chain: https://api.avax.network/ext/bc/C/rpc (Ava Labs)
• Arbitrum One: https://arb1.arbitrum.io/rpc (Offchain Labs)
• Optimism: https://mainnet.optimism.io (OP Labs)
• Base: https://mainnet.base.org (Coinbase)
• Solana: https://api.mainnet-beta.solana.com (Solana Foundation)

When is data sent: Whenever the Web3 gateway is active and an order is pending blockchain confirmation. Calls are made server-side via WordPress HTTP API (wp_remote_post).

Terms and Privacy:
– Cloudflare: https://www.cloudflare.com/terms / https://www.cloudflare.com/privacypolicy/
– PublicNode: https://www.publicnode.com/terms / https://www.publicnode.com/privacy
– Polygon Labs: https://polygon.technology/terms-of-use / https://polygon.technology/privacy-policy
– Ava Labs (Avalanche): https://www.avax.network/legal / https://www.avax.network/legal
– Offchain Labs (Arbitrum): https://arbitrum.foundation/privacy-notice / https://arbitrum.foundation/privacy-notice
– OP Labs (Optimism): https://www.optimism.io/terms / https://www.optimism.io/privacy
– Coinbase (Base): https://coinbase.com/legal/user-agreement / https://coinbase.com/legal/privacy
– Solana Foundation: https://solana.com/tos / https://solana.com/privacy-policy

QRServer (QR code generation)
Used to generate QR codes for cryptocurrency wallet addresses on the Web3 checkout page.
– What is sent: The recipient wallet address (a public blockchain address, not personal data) and desired QR image size.
– When: Rendered in the customer’s browser on the Web3 checkout/receipt page when the crypto gateway is active.
– Service URL: https://api.qrserver.com
– Terms of Service: https://goqr.me/legal/
– Privacy Policy: https://goqr.me/privacy/

Support

For support or questions, contact:
– hey@tuhin.dev

Credits

Developed by Tuhin Bhuiyan (https://tuhin.dev)

License

This plugin is free software, released under the GPLv2 or later.