PallasMark – Video Proof & Buyer Approval for WooCommerce

Description

Protect your WooCommerce store from “item not as described” disputes, chargebacks, and false
damage claims — with automatic video proof of every order before it ships, plus optional buyer
approval before the package ever leaves your warehouse.

PallasMark records short video or photo proof of your orders during packing, and can require the
buyer to review and approve that proof before you ship. If a dispute or chargeback happens later,
you have timestamped, tamper-evident order proof showing exactly what left your warehouse and
when — turning a “he said, she said” argument into an open-and-shut case backed by evidence.

Typical use cases: high-value or fragile orders where “item not as described” claims are common,
sellers who’ve been burned by chargebacks before, warehouses and 3PLs that want a documented,
timestamped fulfillment record, and any WooCommerce store that wants proof of delivery beyond a
courier’s tracking number.

This plugin automates the whole connection: paste a one-time connect token from your PallasMark
account, click Connect to PallasMark, and the plugin registers itself with PallasMark and
creates the order.created / order.updated webhooks on WooCommerce’s modern REST API
(wp_api_v3) — using the single webhook secret PallasMark actually verifies, so there’s nothing
left to copy between the two systems by hand.

What this plugin does:

• Adds a WooCommerce → PallasMark settings page.
• On your click, calls PallasMark with your one-time connect token and this store’s URL, receives
  back a webhook secret, and creates the order webhooks pointed at PallasMark using that secret —
  no manual webhook setup in WooCommerce → Settings → Advanced → Webhooks, and nothing to
  copy-paste into PallasMark yourself.
• Re-running “Connect to PallasMark” is safe — it replaces any previous PallasMark webhooks
  instead of creating duplicates.

What this plugin does NOT do: it does not send any order data anywhere by itself outside of
the explicit setup action described above. Once connected, WooCommerce’s own webhook delivery
system sends the order payload to PallasMark whenever triggered by real order activity. You still
need a PallasMark account to receive and use that data — this plugin is
the WooCommerce-side half of the connection, not a full product on its own.

After connecting here, you’ll also need to click Connect WooCommerce inside PallasMark
(Integrations page) to grant a read/write REST API key pair — this is what lets PallasMark write
the proof link and approval status back onto your orders. The webhook connection alone only lets
orders flow in; the REST key is what lets status flow back.

External service disclosure: PallasMark is a hosted Software as a Service product, and this
plugin talks to it in two distinct ways:

1. Install ping (automatic). On activation, on deactivation, and at most once every 24 hours
   while active, the plugin sends this site’s own public URL plus the plugin/WordPress/WooCommerce
   version numbers to PallasMark — nothing else, no order/customer/product data. This lets
   PallasMark know your store has the plugin installed so we can reach out with setup help if you
   haven’t connected yet; it does not require or create a PallasMark account. See == Privacy ==
   below.
2. Store connection (explicit, your click). When you paste a connect token and click
   Connect to PallasMark, the plugin (a) calls PallasMark’s registration API with that token
   and this site’s URL to obtain a webhook secret, and (b) configures WooCommerce to send
   order-created and order-updated webhook payloads to the PallasMark service going forward.
   Depending on the order, those payloads may include customer contact, billing, shipping,
   product, and order-status data.

Use of the service is subject to the
PallasMark Terms of Service and
Privacy Policy.

Privacy

This plugin sends data to PallasMark (app.pallasmark.com, or a different URL if you’ve configured
one on the settings page) in the two situations described above. Summary of what’s sent and when:

• On activate / deactivate / a throttled daily heartbeat: this site’s URL (home_url()) and
  the plugin/WordPress/WooCommerce version numbers. No order, customer, or product data — this
  happens automatically, without a click, so it needs to stay minimal by design.
• Only when you click “Connect to PallasMark”: a webhook secret exchange (your connect token
  • this site’s URL), and from then on WooCommerce’s own order webhook payloads (which can include
    customer/order data) for as long as the connection stays active.

Deactivating or uninstalling the plugin stops all of the above. See PallasMark’s
Privacy Policy for how that data is handled once received.

Privacy == section for the full breakdown of what’s sent and when.

What happens if I deactivate the plugin?

The webhooks it created remain registered in WooCommerce (visible under WooCommerce → Settings →
Advanced → Webhooks) until you delete them manually or reactivate the plugin and re-register
(which replaces them). Deactivating the plugin does not disconnect your PallasMark account, and
stops the automatic install ping described above.

I previously used the “drProof” plugin — do I need to do anything?

Re-running Register webhooks on this version automatically removes any leftover webhooks from
the old plugin name and endpoint, and creates fresh ones pointed at the current PallasMark
endpoint.