=== Super Shop WP ===
Contributors: supershopwp
Tags: ecommerce, online-store, shop, payments, store
Requires at least: 6.0
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A complete standalone e-commerce platform for WordPress — products, cart, checkout, payments, orders, shipping, and analytics.

== Description ==

Super Shop WP is a self-contained e-commerce platform for WordPress. It runs on its own custom database tables and a REST API with a fast, dependency-free JavaScript admin, so it does not require any other e-commerce plugin to work.

The free plugin is fully functional on its own. It includes:

* Product catalog with categories, attributes, brands, and product tags
* Cart and a complete checkout flow
* Order management and a customer directory
* Coupons and discounts
* Inventory tracking
* Shipping rates and tax rates
* Reviews, wishlist, and digital downloads
* A built-in storefront with editable Home, About, Contact, and Announcement pages, plus a blog
* Analytics dashboard with revenue and order reporting
* Contact inbox, media library, staff roles, and outgoing webhooks
* Multilingual interface — ships with English and Arabic (with full right-to-left support), and you can add and translate additional languages

Super Shop WP integrates with a number of third-party payment, shipping, and anti-spam services. These integrations are optional and only contact an external service after you configure and enable them. See the "External services" section below for the full list and what each one sends.

A separate commercial add-on, Super Shop Pro, adds further modules (point of sale, subscriptions, returns, loyalty, gift cards, marketing, affiliates, multi-branch, AI tools, and more). The Pro add-on is not required to use this plugin, and this plugin does not lock, disable, or nag about any of its own features.

== External services ==

Super Shop WP can connect to the third-party services listed below. None of them are contacted unless you enable and configure the corresponding feature (for example, entering API keys for a payment gateway, enabling a shipping carrier, or turning on an additional currency). No data is sent to any of these services during normal browsing or admin use unless that feature is active.

**Payment gateways.** When you enable a gateway and a customer pays with it, order and payment details (such as amount, currency, order reference, and the billing information required to process the charge) are sent to that provider to create and confirm the transaction. Supported providers and their terms/privacy policies:

* Stripe — https://stripe.com/legal — https://stripe.com/privacy
* PayPal — https://www.paypal.com/legalhub — https://www.paypal.com/privacy
* Square — https://squareup.com/legal — https://squareup.com/privacy
* Authorize.Net — https://www.authorize.net/about-us/terms.html — https://www.authorize.net/about-us/privacy.html
* 2Checkout (Verifone) — https://www.2checkout.com/legal/ — https://www.2checkout.com/policies/privacy-policy/
* Klarna — https://www.klarna.com/international/terms-and-conditions/ — https://www.klarna.com/international/privacy-policy/
* Moyasar — https://moyasar.com/en/resources/terms/ — https://moyasar.com/en/resources/privacy-policy/
* Tamara — https://tamara.co/en-sa/terms-and-conditions — https://tamara.co/en-sa/privacy-policy
* Tabby — https://tabby.ai/en-AE/legal/terms-and-conditions/latest — https://tabby.ai/en-AE/legal/privacy-policy/latest
* Payoneer Checkout (hosted payment page; API host: oscato.com) — https://www.payoneer.com/legal/ — https://www.payoneer.com/legal/privacy-policy/

**Shipping carriers.** When you enable a carrier and create a shipment or request a rate, the recipient address, parcel weight/dimensions, and sender details are sent to that carrier to generate rates, labels, and tracking:

* Aramex — https://www.aramex.com/us/en/terms-of-use — https://www.aramex.com/us/en/legal-details/privacy-policy
* SMSA Express — https://smsaexpress.com — https://smsaexpress.com/privacy-policy
* Naqel Express — https://www.naqelexpress.com/en/About/TermsCondition — https://www.naqelexpress.com/Privacy/PrivacyPolicy
* USPS — https://about.usps.com/termsofuse.htm — https://about.usps.com/who/legal/privacy-policy/full-privacy-policy.htm
* AfterShip (tracking) — https://www.aftership.com/legal/terms-of-service — https://www.aftership.com/legal/privacy
* EasyPost (multi-carrier rating & label generation) — https://www.easypost.com/terms — https://www.easypost.com/privacy-policy
* Shippo (multi-carrier rating & label generation) — https://goshippo.com/legal — https://goshippo.com/privacy

(UPS, FedEx, DHL, and OnTrac are referenced only to build public package-tracking links; no data is sent to them by the plugin.)

**Spam protection.** If you enable a CAPTCHA provider on forms, the visitor's challenge token and IP address are sent to that provider for verification:

* Google reCAPTCHA — https://policies.google.com/terms — https://policies.google.com/privacy
* Cloudflare Turnstile — https://www.cloudflare.com/website-terms/ — https://www.cloudflare.com/privacypolicy/
* hCaptcha — https://www.hcaptcha.com/terms — https://www.hcaptcha.com/privacy

**Currency exchange rates.** When you change your store's base currency, the plugin fetches reference exchange rates from Frankfurter (which sources European Central Bank data) to convert historical order amounts. Only currency codes are sent; no personal or store data is transmitted. https://frankfurter.app — https://www.frankfurter.app/docs/

**Analytics & advertising.** If you enter a Google Analytics 4 / Google Tag Manager measurement ID or a Facebook (Meta) Pixel ID in the settings, the storefront loads that provider's script from their servers and sends visitor and e-commerce events (page views, product views, add-to-cart, checkout, purchases). Both are off until you enter an ID.

* Google Analytics / Google Tag Manager — https://policies.google.com/terms — https://policies.google.com/privacy
* Facebook (Meta) Pixel — https://www.facebook.com/legal/terms — https://www.facebook.com/privacy/policy

**Maps & address lookup.** If you enable the map address picker at checkout, the storefront loads map tiles from OpenStreetMap and geocodes/reverse-geocodes the address a customer enters using OpenStreetMap's Nominatim service. These are only contacted when the map picker is enabled.

* OpenStreetMap (map tiles) — https://www.openstreetmap.org/copyright — https://wiki.osmfoundation.org/wiki/Privacy_Policy
* Nominatim (geocoding) — https://operations.osmfoundation.org/policies/nominatim/ — https://wiki.osmfoundation.org/wiki/Privacy_Policy

**Web fonts.** The plugin bundles its default storefront fonts locally and makes no external font request by default for the storefront. Fonts are loaded from Google Fonts in two cases: if you select a custom storefront font that is not bundled, and in the Arabic transactional email template, which links Noto Kufi Arabic so Arabic renders correctly in email clients. https://policies.google.com/terms — https://policies.google.com/privacy

**Video embeds (YouTube / Vimeo).** If you add a YouTube or Vimeo video URL to a product, blog post, or storefront section, the storefront embeds that provider's player and loads its thumbnail on the relevant public page so visitors can watch it. This happens only for videos you add, and the plugin sends no customer data. https://www.youtube.com/t/terms — https://policies.google.com/privacy — https://vimeo.com/terms — https://vimeo.com/privacy

**Outgoing webhooks.** If you create a webhook, the plugin sends the event data you configure to the destination URL you specify. The destination is entirely under your control.

**Search engine indexing (IndexNow).** If you turn on IndexNow in the SEO settings, the plugin notifies the IndexNow service when your store URLs change so that participating search engines (such as Microsoft Bing) can re-crawl them. Only public URLs from your own site are sent; no personal or customer data is transmitted. It is off by default and requires a key you generate in the settings. https://www.indexnow.org/ — https://www.bing.com/webmasters/help/indexnow-faq-cf1f4b8e

== Installation ==

1. Upload the `super-shop-wp` folder to the `/wp-content/plugins/` directory, or install the plugin through the WordPress Plugins screen.
2. Activate the plugin through the Plugins screen in WordPress.
3. Open Super Shop WP from the admin menu and follow the setup wizard to configure your store currency, pages, and basic settings.
4. Optionally configure payment gateways, shipping carriers, and other integrations under Settings. Each integration is off until you enable it.

== Frequently Asked Questions ==

= Does Super Shop WP require another e-commerce plugin? =

No. Super Shop WP is fully standalone and runs on its own database tables and REST API.

= Does the plugin send my data anywhere? =

Not during normal use. External services are only contacted when you enable and configure the matching feature. See the "External services" section for the complete list and what each one sends.

= Is the plugin free to use? =

Yes. Every feature listed in the description works in the free plugin. An optional commercial add-on adds extra modules, but it is not required and the free plugin does not lock or disable any of its own features.

= Does it support languages other than English? =

Yes. English is the default language and Arabic is included out of the box (with full right-to-left layout). You can also add and edit additional languages and their translations from the admin.

== Screenshots ==

1. The admin dashboard with revenue and order analytics.
2. Product catalog management.
3. The order management screen.
4. The storefront checkout.
5. Store settings.

== Changelog ==

= 1.0.0 =
* Initial public release on WordPress.org.

== Upgrade Notice ==

= 1.0.0 =
Initial public release.
