TejCart

TejCart is a complete, self-contained shopping cart for WordPress. Sell physical goods, digital downloads, or services — products, cart, checkout, orders, customers, coupons, taxes, shipping, emails, and reports are all built in. It is a standalone storefront that needs no companion ecommerce plugin, and there is no monthly platform fee.

TejCart gives shoppers a fast, single-page checkout that accepts credit and debit cards, Pay Later, and digital wallets including Apple Pay and Google Pay. Raw card data never touches your server: card details are tokenised in the shopper’s browser, keeping your store in the simplest PCI scope (SAQ A).

Built on modern, typed PHP (8.2+) with a purpose-built data layer and full Gutenberg block support, TejCart is fast for shoppers and predictable for developers.

Sell any kind of product

• Simple, variable, digital, downloadable, grouped, external, and bundle products
• Product attributes and variations with per-variation pricing, images, and stock
• Inventory tracking with low-stock and out-of-stock handling
• Secure, time-limited download URLs for digital and downloadable goods
• CSV import and export for catalog migration and bulk edits

A checkout that converts

• AJAX shopping cart with persistent storage for logged-in shoppers
• Fast single-page checkout with guest checkout
• Credit and debit cards, Pay Later, and digital wallets (Apple Pay, Google Pay)
• Saved payment methods with vault tokens encrypted at rest
• Coupons and discounts with flexible cart- and product-level rules

Everything to run the store

• Order management with partial and full refunds, order notes, and invoices
• Customer accounts with order history and a saved address book
• Tax rules and shipping zones, classes, and rates
• Transactional emails with theme-overridable templates
• Reports for revenue, orders, items sold, and coupon usage
• Capabilities scoped to store management for staff roles

Built for WordPress

TejCart follows WordPress the right way. It uses core hooks, the REST API, and templates you can override from your theme — front-end markup, transactional emails, and pricing are all filterable. Gutenberg blocks are provided for cart, checkout, account, and product displays, and a full WP-CLI command set (wp tejcart …) is included for automation and bulk tasks. Multisite is fully supported.

Privacy and PCI by design

Your store never accepts or stores raw card numbers, CVV codes, or expiry dates. Card data is tokenised in the buyer’s browser, and only opaque references — capture IDs, payer IDs, and vault tokens — ever reach your database, encrypted at rest with AES-256-GCM. This keeps your store within PCI DSS SAQ A scope.

Built-in modules

Keep your site lean: advanced capabilities ship inside the plugin as modules that are off by default and load only when you switch them on from TejCart > Modules. Nothing extra runs — and no third party is ever contacted — until you enable the module you want. The following modules are bundled and ready to turn on:

• Storefront Search — fuzzy, weighted product search with live autocomplete that finds “blue jeans” even when a shopper types “bleu jeans”.
• Product Filters — faceted shop navigation to filter by category, brand, price, rating, stock and attributes, with instant AJAX updates and clean, shareable URLs.
• Variation Swatches — show variable-product options as colour, image and label swatches instead of dropdowns, on product pages and shop archives.
• Address Autocomplete — shoppers pick their address from a dropdown that fills city, state and postcode in one tap, a proven checkout conversion lever (powered by Google Places; your own API key).
• Currency Switcher — show prices in the shopper’s local currency with hourly exchange rates, optional geolocation, psychological price rounding, and per-currency payment-gateway rules.
• Real-time Shipping — live carrier rates from FedEx, UPS, USPS, DHL, Royal Mail, Australia Post, Canada Post and more; each carrier stays off until you enter its credentials.
• Order Tracking — add tracking numbers and carrier deep-links to orders and let customers check shipment status without contacting support.
• Tax Providers — accurate sales tax, VAT and GST through Stripe Tax, TaxJar or Avalara, with no manual rate tables to maintain (your own provider credentials).
• AI Content SmartSuite — generate product titles, descriptions, tags and FAQs with OpenAI, with fully editable prompts, 35+ languages, and one-click apply (your own OpenAI key).
• Bot Protection (CAPTCHA) — put Cloudflare Turnstile, hCaptcha or Google reCAPTCHA in front of login, checkout, cart and coupon endpoints to stop card-testing bots that ride past per-IP rate limits.

Modules that connect to an outside service only do so after you enable them and enter your own credentials; the exact endpoints and providers are listed under External Services below.

Requirements

• WordPress 6.3 or later
• PHP 8.2 or later
• HTTPS enabled

External Services

TejCart connects to the external services below to provide payment processing and merchant onboarding. Data is only sent when the corresponding feature is actively used.

PayPal

When a shopper checks out, or a merchant refunds, captures, or voids a transaction, TejCart calls PayPal’s REST API at https://api-m.paypal.com (live) or https://api-m.sandbox.paypal.com (sandbox). Order totals, line items, billing and shipping addresses, and buyer contact information are sent as part of the checkout flow. The plugin also loads the PayPal JavaScript SDK from https://www.paypal.com/sdk/js and the partner-onboarding lightbox from https://www.paypal.com/webapps/merchantboarding/js/lib/lightbox/partner.js on the connect screen.

• Service provider: PayPal, Inc.
• Terms of service: https://www.paypal.com/us/legalhub/useragreement-full
• Privacy policy: https://www.paypal.com/us/legalhub/privacy-full

Google Pay

When the merchant enables Google Pay, the plugin loads Google’s Pay JavaScript SDK from https://pay.google.com/gp/p/js/pay.js on the cart and checkout pages so the Google Pay button can render and tokenize the shopper’s card.

• Service provider: Google LLC
• Terms of service: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en
• Privacy policy: https://policies.google.com/privacy

TejCart Partner Onboarding Proxy

To enable one-click merchant onboarding without shipping partner credentials in the plugin, TejCart calls a proxy at https://tejcart.com/ppcp-seller-onboarding/seller-onboarding.php. The proxy is only contacted while a merchant is connecting or disconnecting a payment account. The plugin sends the merchant’s WordPress admin email, the environment (sandbox or live), a return URL pointing back to the WordPress admin, and the requested product bundle. No shopper data, order data, or API credentials are sent.

• Service provider: TejCart
• Terms of service: https://tejcart.com/terms-of-service.html
• Privacy policy: https://tejcart.com/privacy-policy.html

Optional bot-protection providers (disabled by default)

The captcha providers below are opt-in. They are disabled by default and only become active after the merchant explicitly enables a provider under TejCart > Settings > Security and supplies their own site key + secret key. When enabled, the plugin verifies a challenge token on the cart, checkout, login, and registration forms by sending the visitor’s IP address and the challenge token to the provider’s siteverify endpoint.

hCaptcha — When enabled, the plugin calls https://hcaptcha.com/siteverify to verify a challenge response.

• Service provider: Intuition Machines, Inc. (hCaptcha)
• Terms of service: https://www.hcaptcha.com/terms
• Privacy policy: https://www.hcaptcha.com/privacy

Cloudflare Turnstile — When enabled, the plugin calls https://challenges.cloudflare.com/turnstile/v0/siteverify to verify a challenge response.

• Service provider: Cloudflare, Inc.
• Terms of service: https://www.cloudflare.com/website-terms/
• Privacy policy: https://www.cloudflare.com/privacypolicy/

Google reCAPTCHA — When enabled, the plugin calls https://www.google.com/recaptcha/api/siteverify to verify a challenge response.

• Service provider: Google LLC
• Terms of service: https://policies.google.com/terms
• Privacy policy: https://policies.google.com/privacy

Optional bundled-module services (disabled by default)

TejCart ships an optional Tax module that is OFF by default. It does not contact any third party until a merchant turns the module ON under TejCart > Modules, enables a specific provider, and enters that provider’s own API credentials. Each service below is only contacted when its feature is actively used.

Live tax providers (Tax module). When a provider is enabled, TejCart sends the cart/line totals and the order’s billing/shipping address to calculate tax at checkout and, where supported, to record the finalised transaction.

• TaxJar — https://api.taxjar.com — Terms: https://www.taxjar.com/terms — Privacy: https://www.taxjar.com/privacy-policy
• Avalara AvaTax — https://rest.avatax.com — Terms: https://www.avalara.com/us/en/legal/terms.html — Privacy: https://www.avalara.com/us/en/legal/privacy-policy.html
• Stripe Tax — https://api.stripe.com — Terms: https://stripe.com/legal/ssa — Privacy: https://stripe.com/privacy

AI Content SmartSuite module. When this module is enabled and you add your own OpenAI API key, TejCart sends the product fields you choose to generate copy for — name, description, short description, tags, categories and attributes — to OpenAI to produce titles, descriptions, tags and FAQs. No customer data, pricing or personally identifiable information is transmitted. Nothing is sent until you enter a key and click Generate.

• OpenAI — https://api.openai.com — Terms: https://openai.com/policies/terms-of-use — Privacy: https://openai.com/policies/privacy-policy