The PhiXtra AI Sales Agent is an AI-powered sales agent for your WooCommerce store — it chats with customers, helps them find products, answers questions, and provides support.
Your published WooCommerce products are sent to PhiXtra automatically once your API key is saved, so the AI can answer questions about them and recommend them. New, changed, sold-out and deleted products follow by themselves. One plugin does it all.
You need a PhiXtra API key to use this plugin. Get one from:
https://portal.phixtra.com/
Features
- AI-powered support and sales agent
- Secure API key authentication
- Customizable branding (colors and fonts)
- Free Trial and Upgrade links (optional)
- Automatic product sync from WooCommerce (all published products, or chosen categories)
- Built for WooCommerce
External Services
This plugin connects your WordPress / WooCommerce website to the PhiXtra AI service (https://phixtra.com), which is required for all plugin functionality.
Service: PhiXtra AI Sales & Support Agent
Provider: PhiXtra (https://phixtra.com)
Primary endpoint: https://chat.phixtra.com (chat widget, cart recovery, and support features). Product sync (item 11) uses https://data.phixtra.com. A further endpoint, https://portal.phixtra.com, is used only for account setup: the check in item 8 and the one-click connect in item 12 below.
What data is sent and when
Outbound requests go to the PhiXtra backend at chat.phixtra.com via HTTPS POST for the visitor-facing widget features (items 1–7), and to portal.phixtra.com via HTTPS GET for the admin-only setup check (item 8). The specific paths and the data each one carries are listed below.
-
Chat messages — POST to chat.phixtra.com/chat every time a visitor submits a message in the chat widget. Data includes: the visitor’s message text, the configured API key, and a pseudonymous session identifier (UUID stored in localStorage/cookie).
-
Cart events (WooCommerce only, when Cart Revenue Recovery is enabled) — POST to chat.phixtra.com/cart-event when a visitor adds/removes items, starts checkout, or completes an order. Data includes: API key, session ID, event type, cart total, cart line-item names/SKUs, and (if the visitor is logged in) their email address.
-
Cart recovery check — POST to chat.phixtra.com/check-recovery on each page load when Cart Recovery is enabled, to determine whether a recovery popup should appear for the current session. Data includes: API key and session ID.
-
Cart recovery reply — POST to chat.phixtra.com/cart-recovery-reply when a visitor replies inside the recovery popup. Data includes: API key, session ID, and message text.
-
Notify When In Stock — POST to chat.phixtra.com/notify-when-in-stock when a visitor submits their email via the “Notify me when back in stock” widget form. Data includes: API key, product ID, product name, product URL, and the visitor’s email address.
-
Stock back-in notification — POST to chat.phixtra.com/stock-back-in when a WooCommerce product transitions to in-stock. Data includes: API key and product ID.
-
Handoff contact capture — POST to chat.phixtra.com/handoff-contact when a visitor submits the in-widget contact form. Data includes: API key, session ID, visitor name, phone number, and email address.
-
Account connection status check (admin-only, background) — GET to portal.phixtra.com/connect/status. This runs automatically via WP-Cron, starting 5 minutes after activation and then at most every 15 minutes, but only for stores that have not yet saved an API key. Data includes: the site’s home URL and the WordPress admin email address — no visitor, customer, or product data is included. Its purpose is to detect when the store owner has finished creating a PhiXtra account, so the settings page can show them a “your account is ready, paste in your API key” message instead of a generic signup prompt. This check — and its scheduled WP-Cron event — stops permanently the moment an API key is saved or the account is marked verified, and is also removed on plugin deactivation.
-
Word-by-word answers — POST to chat.phixtra.com/chat/stream when a visitor sends a message, so the answer appears as it is written. Data is the same as item 1 (message text, API key, session ID), plus the assistant name set in the plugin settings. If this is unavailable the widget uses item 1 instead.
-
Live replies from your team — POST to chat.phixtra.com/team-chat/poll every few seconds, but only after a visitor’s chat has been passed to the store’s team (for example when the AI is switched off, has used its monthly messages, or hands the chat over). It stops when the visitor starts a fresh chat, and pauses while the browser tab is hidden. Data includes: API key, session ID and the number of the last reply already shown. It returns the team’s replies so they appear in the chat.
-
Product sync (WooCommerce only) — POST to data.phixtra.com/sync/batch from the store’s server (never from a visitor’s browser), and only for the products the admin chose on the Products tab (none by default; chosen categories, chosen products or all published products): when the choice is saved, then whenever a chosen product is published, changed, goes in or out of stock, or is trashed/deleted, and when the admin clicks “Sync chosen products now”. Data includes: API key, the site address, and for each published product its ID, name, descriptions, SKU, price, stock status, categories, tags, brand, attributes, variation names/prices/stock, product URL, main image URL, and these product fields when set: GTIN, MPN, EAN, ISBN, UPC, cost price, supplier, manufacturer, model, colour, size, material, brand, compatibility. Drafts and private products are never sent. No customer or order data is sent by this feature.
-
One-click connect (admin-only) — when an administrator clicks “Connect to PhiXtra”, their browser goes to portal.phixtra.com/connect/authorize with the site’s home URL and a one-time security value, they log in and approve, and come back to this site’s admin. The store’s server then sends a POST to portal.phixtra.com/connect/exchange with the one-time code and the site’s home URL, and receives the store’s API key, which is saved in the plugin settings. The code works once, for 10 minutes, and only for this website.
Items 1–7, 9, 10 and 11 above are only sent once a valid API key has been saved in the settings. Items 8 and 12 are the only requests that can run before a key is saved (see above for exactly when it starts and stops). No data is stored in the WordPress database by this plugin beyond its own settings (e.g. whether an account has been verified).
URL rendering in the chat widget
The chat widget (assets/widget.js) formats URLs that appear inside AI responses as clickable hyperlinks. If a URL in the AI response does not already start with “http”, the widget prepends “https://” before rendering it as an anchor tag. This formatting happens entirely within the visitor’s browser; no request is made to any third-party domain by this code. The URLs rendered are those returned by the PhiXtra AI service (typically product pages on your own store).
PhiXtra terms of service and privacy policy
- Terms of Service: https://phixtra.com/terms-conditions/
- Privacy Policy: https://phixtra.com/privacy-policy/
Privacy
All chat messages, cart events, and contact details collected by this plugin are transmitted to PhiXtra as described in the External Services section above. Site owners are responsible for informing their visitors about this data processing in their own privacy policies. Separately, the store’s own site URL and the WordPress admin’s email address (not a visitor’s) are sent to PhiXtra as part of the account-setup check described in item 8 of that section, until an API key is saved.