Navidium Shipping Protection

Navidium Shipping Protection lets shoppers add protection against lost, damaged or
stolen deliveries, as a toggle on your cart and checkout. The protection fee is
collected by your own store as part of the order.

The widget text, pricing rules and claim handling are configured in your Navidium
account and delivered to this plugin, so you can change them without editing anything
in WordPress.

Features

• Optional protection toggle on the cart and the checkout
• Works with classic cart and checkout, the WooCommerce cart and checkout blocks, and CheckoutWC
• Charge the fee either as an order fee or as a hidden protection product
• Percentage or flat pricing, with a configurable minimum
• Choose where the widget appears on the cart and the checkout
• Optionally exclude wholesale customer roles
• Multi-currency aware

A Navidium account is required

This plugin is a client for the Navidium shipping protection service. It does nothing
on its own: until you connect it to a Navidium account, it adds nothing to the cart,
changes no prices, and makes no external requests.

Navidium is a paid subscription service, billed separately from WordPress. See
https://navidiumapp.com for plans and details. The protection fee your shoppers
pay is collected by your store and is yours; Navidium charges you a monthly
subscription for the service.

External services

This plugin connects to services operated by Navidium (https://navidiumapp.com).
It makes no external requests at all until you connect it with a plugin token.

1. Navidium API — https://woocommerce.navidiumapp.com

Used for four things:

• Connecting your store. When you submit your plugin token on the
  WooCommerce > Shipping Protection screen, the plugin makes one request to
  https://woocommerce.navidiumapp.com/api/v1/plugin/connect, sending your plugin token
  and your site URL (from home_url()). Navidium replies with your account’s shop
  name, store domain, and settings feed URLs. This happens only when you click
  Connect or Test connection.
• Reading your protection settings, as a fallback when the settings feed below is
  unreachable: GET https://woocommerce.navidiumapp.com/api/v1/plugin/settings?domain=YOUR-STORE-DOMAIN.
  This sends only your store domain.
• Completing a connection. When you return from checkout, the plugin makes one request to
  https://woocommerce.navidiumapp.com/api/v1/plugin/claim, sending the one-time code from the
  return link and this site’s URL, and receives the credential this site uses from then on.
• Registering the protection product, once, and only when “product” billing mode is
  enabled: POST https://woocommerce.navidiumapp.com/api/v1/plugin/protection-product,
  sending your store domain, the WooCommerce product ID and the product SKU,
  authenticated with your plugin token.

2. Navidium settings feed — https://cdnv2.navidiumapp.com

Your protection settings (widget text, icon, pricing rules) are published by Navidium
as a static JSON file at
https://cdnv2.navidiumapp.com/nsp-wp-settings/YOUR-STORE-DOMAIN.json , served from
Amazon S3 and CloudFront. The plugin only ever contacts the CDN hostname above; if it
cannot be reached, the plugin falls back to the Navidium API host already listed.

• WordPress reads this file on the server, cached for 60 seconds in a transient.
• The cart and checkout script also reads it in the shopper’s browser, so widget
  changes appear without clearing a page cache. That copy is stored in the shopper’s
  browser under localStorage key navidium_live_settings_payload.

These requests send only the URL. No customer data, order data, or personal data is
included, and no credential is present in the response.

3. Widget icon

The default widget icon ships with the plugin and is served from your own site. If you
upload a custom icon in your Navidium dashboard, that image is loaded from wherever you
host it.

4. Order data

This plugin does not send order or customer data to Navidium. If you use Navidium for
claims handling, order data is sent by a WooCommerce webhook that you configure
separately in your Navidium dashboard. That is a different integration and is not
performed by this plugin.

Service provider: Navidium — https://navidiumapp.com
Terms and conditions: https://navidiumapp.com/terms-conditions
Privacy policy: https://navidiumapp.com/privacy-policy