Fintoc for WooCommerce

Fintoc for WooCommerce lets your store accept account-to-account bank transfers and card payments through Fintoc.

When a customer places an order, the plugin creates a Fintoc Checkout Session and redirects the customer to Fintoc’s secure hosted checkout, where they pick their payment method and authorize the payment. The order is then confirmed in the background through webhook events; each event triggers a lookup against the Fintoc API, which is the source of truth for payment status.

Features

• Hosted, redirect-based checkout — no card data ever touches your server.
• Works with both the classic checkout shortcode and the new Blocks (Store API) checkout.
• HPOS (High-Performance Order Storage) compatible.
• API-verified webhooks — no webhook secret to configure — with replay protection and idempotent processing.
• Refunds initiated directly from the WooCommerce order screen.
• Separate test and live API keys, with an explicit test-mode toggle.
• Supports Chilean Pesos (CLP) and Mexican Pesos (MXN).

External services

This plugin relies on the Fintoc API to process payments. It is the only external
service the plugin communicates with, and it is the service this plugin exists to
integrate with.

What it is used for and what data is sent

• When a customer places an order and selects Fintoc, the plugin sends the order
  total, the currency, the order number, the order key, and the return URLs of your
  store to https://api.fintoc.com in order to create a checkout session. The
  customer is then redirected to Fintoc’s hosted checkout to authorize the payment.
• When Fintoc notifies your store of an event, the plugin sends the identifier
  received in the notification back to https://api.fintoc.com to read the
  authoritative payment status. No customer data is sent in this request.
• When you issue a refund from the WooCommerce order screen, the plugin sends the
  payment identifier, the refund amount, and the reason you entered.

Every request is authenticated with the secret API key you configure in the plugin
settings, and is made only in response to one of the actions above. The plugin sends
no telemetry, no analytics, and no data to any other destination.

Service provided by Fintoc: site —
terms of service —
privacy policy