NeccoSpeak – AI Chatbot & Voice Chat for WordPress

NeccoSpeak adds an AI chatbot with optional voice conversation to your WordPress site, powered by your own OpenAI API key. Answer visitor questions 24/7 by text, or let them speak to your site and hear it answer.

No SaaS, no extra account, no monthly fee, and no server run by us. NeccoSpeak is fully self-contained: it needs nothing but WordPress and your own OpenAI API key. You pay OpenAI directly and stay in control of your costs and your data.

Let visitors talk to your website

Voice conversation sets NeccoSpeak apart (optional, off by default). Visitors ask questions hands-free and hear the answer spoken back — a natural fit for accessibility, mobile users, and anyone who would rather speak than type. Under the hood, the visitor’s browser connects directly to the OpenAI Realtime API over WebRTC using a short-lived token issued by your server; your real API key never reaches the browser. Voice requires HTTPS and browser microphone permission.

What can you use it for?

• 24/7 FAQ and support – answer common questions (opening hours, pricing, services) around the clock.
• Pre-sales questions – catch the visitor who would rather bounce than write an email.
• Online stores – let shoppers ask about shipping, returns, and store policies on the spot, instead of hunting through pages.
• Multilingual visitors – OpenAI models typically reply in the language the visitor writes in, with no extra configuration.
• Blogs and content sites – give readers a way to ask questions instead of leaving.
• Client sites – agencies and freelancers can deploy it without managing yet another SaaS account; each client brings their own key and owns their own billing and data.

You decide who the chatbot is: describe your business, opening hours, policies, and tone in the system prompt, and it answers accordingly.

Why NeccoSpeak?

• Self-contained – no third-party SaaS involved; data flows only between your server, the visitor’s browser, and OpenAI.
• Secure by design – your API key is stored encrypted with AES-256-CBC, never sent to the browser, and masked in the admin screen.
• Zero footprint until configured – while disabled or without a key, the widget is not loaded and visitors trigger no external communication at all.
• Budget protection – per-IP rate limits plus site-wide caps (hourly and daily for chat, daily for voice) keep bots and abusive visitors from running up your OpenAI bill.
• No update needed for new models – type any model name, or fetch the list of models available to your key with one click. New OpenAI models that support the Chat Completions API work as soon as they are released.

Features

• Text chat widget, plus optional voice conversation (off by default)
• Display rules: all pages, only specific URLs, or exclude specific URLs
• Customizable title, welcome message, and brand color
• Free-form model selection with one-click «fetch available models»
• Custom system prompt
• Per-IP and site-wide rate limits with adjustable caps

Cost control

Visitors’ chat usage is billed to your own OpenAI account, so NeccoSpeak ships with brakes built in: a per-IP, per-minute limit plus site-wide caps (hourly and daily for text chat, daily for voice sessions). When a cap is hit, further requests are declined with a temporary error until the limit window resets — so your bill stops growing. Tune the limits to match your budget on the settings screen.

Terms and disclaimer

• This plugin is provided free of charge as open source software (GPLv2 or later) on an «as-is» basis, without warranty of any kind, express or implied. Because it is distributed free of charge, the developer (neccos) assumes no obligation for support, SLA, or continued availability.
• This plugin operates without any server of ours, and no service operated by the developer is involved. It runs with your own OpenAI API key, use of the AI is subject to OpenAI’s terms and policies, and usage fees are billed directly to your OpenAI account. The developer is not involved in any contract, billing, or service matters with OpenAI.
• Data flow: chat text and audio are sent to OpenAI with your key and processed under OpenAI’s terms. This plugin does not store conversation content anywhere, and the developer (neccos) never receives this data (no developer-operated server exists). The only thing the plugin stores within WordPress is the settings entered by the administrator (the API key is encrypted), plus short-lived technical data: rate-limit counters and a cached model list, all removed on uninstall. See «External Services» for details.
• Your responsibilities: as the site owner, you are responsible for (1) complying with OpenAI’s terms, (2) disclosing to your site visitors (end users) that their input is sent to OpenAI and obtaining any consent required by applicable law (e.g., data protection / privacy laws such as GDPR), and (3) maintaining your own privacy policy and related documents. Please advise users not to enter sensitive information in chat or voice.
• The accuracy, legality, and usefulness of AI-generated responses are not guaranteed. Use of this plugin and of AI responses is at the sole risk of the site owner and end users.

External Services

This plugin communicates with the external service OpenAI API (api.openai.com) to generate AI responses. This is a core feature of the plugin, and communication occurs when the AI chat / voice features are used. Voice conversation is a direct connection (WebRTC) to the OpenAI Realtime API, and this plugin does not use a STUN/TURN server by default (no additional communication to third-party servers occurs).

OpenAI API

• Destination endpoints:
  • https://api.openai.com/v1/chat/completions (generating text chat responses; via the PHP proxy)
  • https://api.openai.com/v1/realtime/client_secrets (issuing a short-lived token for voice conversation; PHP → OpenAI)
  • https://api.openai.com/v1/realtime/calls (establishing the WebRTC session for voice conversation; sent directly from the browser to OpenAI)
  • https://api.openai.com/v1/models (retrieving the list of available models; only when an administrator uses «Fetch available models» on the settings screen; PHP → OpenAI)
• Data sent (text chat): the message text entered by the visitor in the chat box, the conversation history, the configured system prompt, and the model name in use. These are sent to OpenAI via the PHP proxy at the moment the visitor sends a message.
• Data sent (model list retrieval): only when an administrator (manage_options capability) uses model list retrieval on the settings screen, a request is made from the server side (PHP) to OpenAI using the API key for authentication. Only the authentication credential is sent; no chat text or visitor data is sent. The response (a list of model IDs) is cached temporarily on the server side. This retrieves model metadata and incurs no OpenAI token billing. The API key is never handed to the browser.
• Data sent (when voice conversation is enabled): in addition to the short-lived token issuance request (PHP → OpenAI), the visitor’s microphone audio is sent directly from the browser to OpenAI over WebRTC. Sending occurs at the moment the visitor starts a voice conversation.
• Timing of sending: communication only occurs when a visitor sends a message or starts a voice conversation. When the plugin is not configured (disabled or no key set), no communication occurs at all.
• Purpose: to generate and return an AI response (text or voice) to the input.

Data sent to OpenAI is subject to OpenAI’s terms and policies. Please be sure to review them before use.

• Terms of use: https://openai.com/policies/terms-of-use/
• Privacy policy: https://openai.com/policies/privacy-policy/
• API data usage policies: https://openai.com/policies/api-data-usage-policies/

日本語 (Japanese)

NeccoSpeak は、ご自身の OpenAI API キーだけで動く AI チャットボット（音声会話対応）を WordPress サイトに追加します。テキストチャットで訪問者の質問に24時間365日自動応答します。オプションの音声会話（既定では無効）を有効にすると、訪問者はサイトと直接「話す」ことができます。

• SaaS や追加のアカウント登録、月額費用は不要で、開発者が運営するサーバーも一切介しません。WordPress とご自身の OpenAI API キーだけで完結し、利用料金は OpenAI からご自身に直接請求されます。
• API キーは AES-256-CBC で暗号化保存され、ブラウザには一切送信されません（管理画面でもマスク表示）。
• プラグインが無効、または API キーが未設定の間は、ウィジェットを一切読み込まず、訪問者による外部通信も一切発生しません。
• IP 単位のレート制限に加え、サイト全体の上限（テキストチャットは毎時・毎日、音声は毎日）で、OpenAI 利用料金の想定外の増加を抑えます。
• 表示ルール（全ページ／指定 URL のみ／指定 URL 除外）、タイトル・ウェルカムメッセージ・ブランドカラーをカスタマイズできます。
• モデル名は自由入力。ワンクリックで利用可能なモデル一覧を取得でき、新しいモデル（Chat Completions API 対応のもの）にもプラグイン更新なしで対応できます。システムプロンプトでチャットボットの役割や答え方を自由に設定できます。
• 音声会話の利用には HTTPS（SSL）とブラウザのマイク権限が必要です。

ご利用にあたって： 本プラグインは、現状のまま（as-is）・無保証で提供される、無料のオープンソースソフトウェア（GPLv2 or later）です。チャット本文および音声はご自身の API キーで OpenAI へ送信されて OpenAI の規約・ポリシーの適用を受け、利用料金は OpenAI からご自身に直接請求されます。本プラグインは会話内容をどこにも保存せず、開発者（neccos）がこれらのデータを受け取ることはありません。AI 応答の正確性は保証されないため、機微な情報を入力しないよう訪問者にご案内ください。訪問者への開示・同意取得やプライバシーポリシーの整備は、サイト運営者の責任で行ってください。正式な記載は英語版の「Terms and disclaimer」および「External Services」であり、詳細はそちらをご参照ください。