Keshav Infotech AI Store Assistant adds a storefront assistant to your WooCommerce shop. It answers questions about your products, your store FAQ and your shipping, returns, payment and contact information, and it can collect visitor details with explicit consent.<\/p>\n\n
What it does<\/strong><\/p>\n\n Three answer modes, you choose<\/strong><\/p>\n\n Bring your own key<\/strong><\/p>\n\n Smart AI and AI First require your own OpenAI API key. Keshav Infotech AI Store Assistant provides no AI credits and does not resell AI usage \u2014 your provider bills you directly. Your key is stored encrypted on your own site.<\/p>\n\n WooCommerce is required<\/strong><\/p>\n\n WooCommerce must be installed and active. If WooCommerce is deactivated, the chatbot pauses safely: your settings and captured leads are untouched.<\/p>\n\n This plugin can contact OpenAI<\/strong> ( In Local Only<\/strong> mode no external service is contacted at any time.<\/p>\n\n There are two places in the plugin that can call OpenAI: the AI provider and the store assistant service. Both pass the same data boundary first.<\/p>\n\n What may be sent:<\/strong> the visitor's question after personal details are removed, plus a minimal amount of product or store information needed to answer it.<\/p>\n\n What is never sent:<\/strong> customer names, email addresses or phone numbers; cart or order contents; account data; payment, card or billing details; passwords; API keys or other secrets; administrator notes; full URLs with query strings; and raw logs.<\/p>\n\n OpenAI's terms: https:\/\/openai.com\/policies\/terms-of-use\nOpenAI's privacy policy: https:\/\/openai.com\/policies\/privacy-policy<\/p>\n\n This plugin sends no analytics, telemetry or usage statistics anywhere.<\/p>\n\n Lead details.<\/strong> When a visitor submits the lead form and ticks the consent box, their name, email, phone (if provided), the page they were on and the time are stored in a table on your own site. Nothing is sent to Keshav Infotech AI Store Assistant.<\/p>\n\n Chat transcript in the visitor's browser.<\/strong> The visible conversation is kept in the visitor's own browser storage so it survives a page change. That copy is never sent to an external service. It expires by itself after 30 minutes of inactivity, and is capped at 30 messages. Browser storage can persist beyond a single browsing session, so until it expires it may remain on the visitor's device. The chat window header includes a Clear chat<\/strong> button that removes it immediately, entirely in the browser.<\/p>\n\n Clear chat clears the browser copy only.<\/strong> It removes the transcript from the visitor's own device. It does not delete anything from your server. If you have conversation history switched on, the record on your site stays until you remove it or your retention period ends.<\/p>\n\n Conversation history is optional and OFF by default.<\/strong> Version 1.0 stores no conversation or message records on your server unless you switch conversation history on under Settings \u2192 Conversations & Privacy.<\/p>\n\n When you do switch it on, each exchange is stored on your own site and nothing is sent to Keshav Infotech AI Store Assistant or to any external service. What is stored is limited to: the visitor-facing question and the chatbot's final answer, the role and time of each message, an anonymous session reference, the page path the chat happened on (without any query string), the product being viewed if any, a linked lead only when that same visitor submitted the lead form, and the conversation status.<\/p>\n\n It never stores raw AI prompts or provider payloads, API keys or other secrets, payment or card details, passwords, order or account data, or the visitor's email address in the conversation record itself.<\/p>\n\n You can set a retention period, run a manual cleanup, view a read-only transcript, export one conversation or the filtered list, and erase a conversation \u2014 by its anonymous reference, or by email where that visitor also submitted the lead form. Switching conversation history off stops new records immediately and never deletes what you already have.<\/p>\n\n Personal data requests.<\/strong> Lead data, and any conversation history linked to that lead, is included in WordPress's built-in personal data export and erase tools, alongside the plugin's own export, erase and retention controls.<\/p>\n\n How your OpenAI API key is stored.<\/strong> The key you enter is encrypted before it is written to your database, using a value derived from your site's own WordPress salts in wp-config.php. Those salts are never stored in the database, so a copy of the database on its own does not reveal a usable key. The key is never printed in a page, never passed to JavaScript, never exposed through the REST API and never written to a log; the settings screen shows only whether a key is saved. It is decrypted only for the moment a request is sent to OpenAI, and it is sent to no other address.<\/p>\n\n Keeping the key out of the database.<\/strong> If you would rather your key never reached the database at all, define it in wp-config.php as Two things worth knowing.<\/strong> Any plugin running on a WordPress site can read that site's other plugin data, so install plugins you trust \u2014 encryption protects the database, not code that is already running on your site. And if you regenerate your WordPress salts, an already-saved key can no longer be decrypted: the plugin simply reports that no key is saved, and you enter it again.<\/p>\n\n\n No. Local Only is the default mode and contacts no external service.<\/p><\/dd>\n Only for Smart AI or AI First. Local Only works without any key.<\/p><\/dd>\n Only if you choose to. Conversation history is off by default, so nothing is kept on your server. The visible transcript lives in the visitor's browser, expires after 30 minutes of inactivity, and the visitor can remove it at any time with the Clear chat button in the chat window header. If you switch conversation history on under Settings \u2192 Conversations & Privacy, each exchange is also saved on your own site, where you can read, export, erase it, or let your retention period remove it. Nothing is ever sent to Keshav Infotech AI Store Assistant.<\/p><\/dd>\n No. Clear chat only removes the copy in the visitor's own browser. Anything saved on your site by conversation history stays until you erase it or your retention period removes it.<\/p><\/dd>\n On your own site only. It is encrypted before it is saved, using a value derived from your WordPress salts in wp-config.php, which are not in the database \u2014 so a database copy on its own does not reveal a usable key. It is never shown in a page, sent to JavaScript, exposed through the REST API or written to a log, and it is decrypted only to send a request to OpenAI. You can keep it out of the database entirely by defining The chatbot pauses. Your settings and captured leads are left exactly as they are.<\/p><\/dd>\n Through the support forum on WordPress.org, plus the help text built into each screen.<\/p><\/dd>\n\n<\/dl>\n\n\n\n
\n
External services<\/h3>\n\n
https:\/\/api.openai.com<\/code>) to generate answers, and only under all of these conditions:<\/p>\n\n\n
Privacy and data<\/h3>\n\n
CARTPILOT_CHAT_OPENAI_API_KEY<\/code>. The plugin then uses the constant, the settings field is disabled, and the key cannot be changed or removed from the admin screens.<\/p>\n\n\n
\n
Does this send my store data anywhere by default?<\/h3><\/dt>\n
Do I need an OpenAI account?<\/h3><\/dt>\n
Does it store chat conversations?<\/h3><\/dt>\n
Does Clear chat delete the conversation from my dashboard?<\/h3><\/dt>\n
Where is my OpenAI API key kept, and how is it protected?<\/h3><\/dt>\n
CARTPILOT_CHAT_OPENAI_API_KEY<\/code> in wp-config.php.<\/p><\/dd>\nWhat happens if I deactivate WooCommerce?<\/h3><\/dt>\n
Where do I get help?<\/h3><\/dt>\n
1.0.0<\/h4>\n\n
\n