Description
wabbiyo is a free WhatsApp inbox plugin. Everything in it works fully, for as
long as you use it, with no payment, no time limit and no cap on WhatsApp
numbers:
- Team Inbox – WhatsApp conversations land in a two-pane inbox for the
site’s administrators. Reply with text, images, video, audio and documents,
add internal notes, set a status (open, pending, snoozed or resolved) and
see unread counts. - Chat widget – a WhatsApp chat button for your website; visitors’ chats
arrive in the Team Inbox. - Contacts – everyone who messages you, with their conversation history,
tags and opt-out status, and a per-contact data export. - Settings it needs – your WhatsApp Cloud API connection (the access token
is stored encrypted), the webhook URL and verify token to paste into Meta,
email, regional and data-retention settings. - Overview and Setup Guide – today’s conversations at a glance, and a
step-by-step guide to connecting your number. - Connection check – twice a day the plugin asks Meta whether your access
token still works, and emails the site’s admin address if it has stopped.
Replies within 24 hours. WhatsApp allows replies for 24 hours after a
customer’s last message. After that, the customer has to write again before
you can reply. This plugin does not send message templates.
No account and no licence key. Nothing asks you to register: the plugin
opens straight into the app.
wabbiyo Pro is a separate plugin that adds WhatsApp automation with the Flow
Builder, message templates, broadcasts, WooCommerce notifications and cart
recovery, an AI chatbot and more. The “Upgrade to Pro” page lists what it adds
and links to wabbiyo.com.
Source code. The JavaScript and CSS source is included; see the FAQ “Where
is the source code of the JavaScript and CSS?” for how to build it.
WhatsApp is a trademark of WhatsApp LLC. wabbiyo is not affiliated with or
endorsed by WhatsApp or Meta.
External services
These are the outside services this plugin contacts, what it sends, and when.
The chat widget talks to your own site, apart from Gravatar pictures (item 4)
and WhatsApp links (item 5). Links to wabbiyo.com, such as those on the Upgrade
to Pro page, open in your browser; the plugin itself sends nothing there.
1. WhatsApp Cloud API (Meta) – graph.facebook.com. This is the plugin’s
core function and cannot be turned off. Sent: your access token and WhatsApp
account IDs; the recipient’s phone number and the content of every message and
media file you send; and your Meta App ID and secret. When: on connecting or
testing the connection, twice a day to check the token still works, each time
you send a message or open received media, and when you run the webhook check.
Meta delivers incoming messages to your site, and received media is downloaded
from the address Meta gives for it, on Meta’s media hosts
(lookaside.fbsbx.com, fbcdn.net, whatsapp.net). When you send media by
link (a web address instead of an upload), your site downloads images from
that public address and uploads them to Meta; for other files Meta fetches
the address itself.
Terms –
Privacy
2. Facebook JavaScript SDK (Meta) – connect.facebook.net. Loaded in your
browser only when you start “Sign up with Meta” in Settings > WhatsApp, after
saving your own Meta App ID and Config ID; never otherwise. Your App ID and
Config ID are passed to Meta, which may set cookies.
Terms –
Privacy
3. Your SMTP relay (optional) – off until you switch it on under
Settings > Email, and never used while another mail plugin sends your email.
Then all email this site sends goes through the relay host you enter, with
the username and password you give it, under your email provider’s terms.
4. Gravatar (Automattic) – gravatar.com. When an agent has no profile
photo uploaded in wabbiyo, the Inbox and the chat widget show their Gravatar.
The picture loads in the viewer’s browser, chat widget visitors included,
which sends Gravatar their IP address and a hash of the agent’s email. Not shown when Settings > Discussion > Show Avatars is
off, nor in the widget before a visitor gives any consent you require.
Terms –
Privacy
5. WhatsApp click-to-chat – wa.me. Only when a visitor clicks the chat
widget’s WhatsApp button: their browser opens wa.me with your number and any
message they typed.
Terms –
Privacy
Privacy
- No AI or CRM data sharing – this plugin sends no contact or message data
to an AI provider or to any lead-integration service. - Configurable data retention –
compliance.retention_months(24 by
default) purges contacts and their data after that much inactivity. Set it
to0to keep data indefinitely. - Export and erase – the plugin registers with WordPress’s Tools > Export
Personal Data and Erase Personal Data, matched by email. Erasing a contact
also erases its internal notes and saved media files. - Encrypted media – media files are stored encrypted. Back up the key:
wp wabbiyo media_key show. - Chat widget – keeps a visitor’s chat and a random visitor ID in their
browser. Button views and clicks are logged on your site with that visitor
ID (only after any consent you require), the agent clicked, the page address, referrer, UTM tags, device type,
language and country (from Cloudflare’s header, if present), and deleted
after 90 days. - Privacy policy text – suggested text for your policy is in WordPress’s
privacy policy guide (Settings > Privacy).
Installation
- Install from Plugins > Add New, or upload the plugin zip there.
- Activate the plugin through the “Plugins” menu.
- Open wabbiyo > Setup Guide and follow its steps: save your Meta App ID
and App Secret, connect your number (Meta’s guided sign-up, or a permanent
access token and phone number ID), and save a verify token. - In your Meta app, under WhatsApp > Configuration, paste the Callback URL
and verify token, and subscribe to the “messages” field.
FAQ
-
Do I need to pay or buy a licence?
-
No. Every feature in this plugin is free, with no time limit and no trial
period, and it takes no licence key. A licence is only for wabbiyo Pro, a
separate plugin, and is entered there. -
Do I need an account?
-
No. For help, use this plugin’s support forum on wordpress.org; Settings >
Support links to it. -
Why was my reply not sent?
-
WhatsApp allows replies for 24 hours after a customer’s last message. If the
customer last wrote earlier than that, the Inbox says so and sends nothing;
you can reply again once they write to you. -
Will the plugin show me ads?
-
On its own screens, all for wabbiyo Pro: the Upgrade to Pro menu item and
page; and the Setup Guide’s “More in wabbiyo Pro” row, which opens the
Upgrade to Pro page. After your first 100 messages, one notice (also on the
Plugins screen) lists what wabbiyo Pro adds and links to its prices on
wabbiyo.com; dismissed, it does not come back. -
What happens to my data when I delete the plugin?
-
It is kept, unless you switch on Settings > Compliance > “Delete all wabbiyo
data when the plugin is deleted”. Deactivating never deletes anything. -
Is my access token safe?
-
Yes – it is encrypted at rest with AES-256-GCM and is never displayed back.
-
Where is the source code of the JavaScript and CSS?
-
In the plugin, and
dist/is built from it without minifying.admin/src/is
the admin app (React 18) and its CSS;widget/src/is the chat widget and its
CSS. The build setup ispackage.json,package-lock.json,
vite.admin.config.js andvite.widget.config.js: with Node.js 18, 20 or
later, runnpm ciand thennpm run buildin the plugin folder to rebuild
dist/.dist/admin/chunks/vendor-react-*.jsis React and React DOM 18.3.1
as published on npm (source: https://github.com/facebook/react); the fonts come
from the@fontsource-variablenpm packages. PHP dependencies (vendor/) come
fromcomposer.json:composer install --no-dev. -
Why do some internal names say “trial”?
-
The plugin’s tables, options, REST routes and admin page addresses start with
watsapex_trial orwatsapex-trial, names kept from its first version so
existing sites keep their data and webhook URL. Nothing in it is a trial or
expires.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“wabbiyo” is open source software. The following people have contributed to this plugin.
Contributors
Translate “wabbiyo” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.2.124
- Chat Widget works before WhatsApp is connected; its chats can be read and
answered in the Inbox. Wider Overview heatmap.
1.2.123
- New: the chat widget (wabbiyo > Chat Widget).
- Replies are sent only within WhatsApp’s 24-hour window; outside it the
Inbox says why and sends nothing. - New: delete all wabbiyo data with the plugin (Settings > Compliance, off by
default), and suggested privacy-policy text. - Erasing a contact or conversation also erases its notes and media.
- Secrets are stored encrypted; input is checked before it is saved, and
responses carry no secrets, paths or database errors. - Language packs translate most of Settings, Contacts, the widget builder and
the chat widget; the Inbox and the help pages are mostly in English. - Removed: AI controls, Security settings, team roles and invitations, and
buttons that only pointed to wabbiyo Pro. - No licence key or account; Settings > Support links to the wordpress.org
forum. The Upgrade page sends no request.
Earlier versions were distributed from wabbiyo.com.