Pommy AI

Description

Pommy AI connects your site to Pommy (https://pommy.ai), a hosted AI customer-support chat service. A Pommy account is required: this plugin is a client for that service and does nothing on its own. Pommy offers free and paid plans — see https://pommy.ai for current plans and pricing.

Install the plugin, paste the Project ID from your Pommy dashboard into Settings → Pommy AI, and the chat launcher appears in the corner of your site.

Read the External services section below before you install. It lists exactly what is sent to Pommy, when, and what is stored — including data collected from visitors who never open the chat.

Why a plugin instead of pasting code into your theme

• Works on block themes (the default since WordPress 5.9), which have no header.php file.
• Works on managed hosts where the Theme File Editor is disabled via DISALLOW_FILE_EDIT.
• Survives theme updates — no theme file is modified, so nothing gets overwritten.

How it works

The plugin registers a small loader script through the WordPress script API (wp_enqueue_script), printed in the site footer. The loader creates a cross-origin iframe that hosts the chat interface on Pommy’s own domain, so the widget’s code and storage stay separate from your site. The iframe is granted microphone permission, for the chat’s optional voice input, and clipboard access so a visitor can copy a reply.

No chat content is stored in your WordPress database, and your server makes no request to Pommy on its own — but the visitor’s browser does, on every page view. See External services.

What the plugin stores in WordPress

Four options in your WordPress database:

• pommy_ai_project_id — your Pommy Project ID.
• pommy_ai_api_url — the Pommy API endpoint (defaults to https://api.pommy.ai).
• pommy_ai_hide_on_checkout — whether the launcher is hidden on the WooCommerce checkout page. On by default.
• pommy_ai_test_result — the outcome of the last “Test connection” check, or the reason a Project ID was refused. Cleared whenever the settings are saved, because an old verdict describes old settings.

Saving the settings screen writes these whether or not a Project ID is filled in. All four are deleted when you delete the plugin, along with the options used by the plugin’s earlier “Pommy Chat” releases.

External services

This plugin connects your site to Pommy (https://pommy.ai), the chat service that powers the widget. Without a Pommy account and a Project ID the plugin sends nothing.

1. The chat widget, running in your visitor’s browser

Once a Project ID is saved, every front-end page loads the widget from the Pommy API host you configured (by default https://api.pommy.ai). From then on the widget talks to Pommy directly, from the visitor’s browser rather than from your server.

Sent on every page view, before the visitor interacts with anything: your Project ID, the page URL and the referring URL, and — inherent to any request their browser makes — the visitor’s IP address and user-agent string. Pommy resolves the IP to a country and city and derives browser, operating system and device type from the user agent, and keeps this as a visitor record whether or not the visitor ever opens the chat. The widget repeats this roughly every 30 seconds while the page is open, and holds a WebSocket connection open to Pommy for the same period. It also fetches the widget’s configuration on load, and its interface translations when the visitor’s language needs them.

Sent only if the visitor uses the chat: the messages they write, and any contact details they choose to type in, for example a name or an email address.

Stored in the visitor’s browser: a visitor identifier and the most recent messages of the conversation, in local storage on Pommy’s domain rather than yours, so the chat survives a page change.

Not sent by the plugin: your WordPress user accounts, your posts, or your WooCommerce order and customer records. The plugin reads only its own settings and, on the settings screen, the current administrator’s capabilities.

2. Setup check, sent from your server

When an administrator presses “Test connection” on the plugin’s settings screen, WordPress makes one request from your server to POST {API URL}/api/plugin/verify.

Sent: your Project ID, your site’s home URL, and the plugin version.
When: only when that button is pressed. Your server contacts Pommy at no other time.
Returned: whether the project exists, whether the domain is verified, the project’s name, and the address of the Pommy API that answered — so a site pointed at the wrong environment names it rather than failing silently.

Pommy’s terms of service: https://pommy.ai/terms
Pommy’s privacy policy: https://pommy.ai/privacy