Codela Commerce Toolkit

Codela Commerce Toolkit brings everyday WooCommerce operations into one modular workspace: notifications, shipment details, stock warnings, payment notifications, order review, support, and event-based workflows.

Choose only the tools your store needs. Every module is disabled by default, and activating the plugin does not automatically send customer messages or webhook data.

Included free tools

• Agreements and consent: Add configurable distance-sales and pre-information agreements to checkout, record customer choices with order-specific document snapshots, provide archived PDFs, and integrate with WordPress personal-data tools.
• Notifications and activity: Send administrator emails through WordPress, configure supported WooCommerce event templates, and review delivery results.
• Shipment tracking: Add a carrier and tracking number to an order, show shipment details in My Account, and send only the shipment updates you enable.
• Stock alerts: Notify store administrators when products reach low-stock or out-of-stock conditions.
• Bank transfer notifications: Let customers submit EFT or wire-transfer details from an order and let administrators review each notification.
• Order protection: Apply configurable rules and flag matching orders for manual review.
• Order-linked support: Keep customer and administrator messages attached to the related WooCommerce order.
• Payment plans: Display configurable installment and payment-plan tables on product, cart, and checkout pages.
• Gift wrap and notes: Offer an optional gift-wrap fee and let customers attach a gift note during checkout.
• Regional addresses: Add province, district, and neighborhood selectors to Turkish WooCommerce checkout and customer address forms.
• Live visitor counter: Show a configurable real-time visitor indicator on product pages.
• Flowboard automation: Connect supported Codela events to internal actions or administrator-configured HTTPS webhooks.
• Guided setup: Use Codela Brain to find enabled modules that still need configuration.
• Store Appearance: Give product details and customer account areas one consistent visual language while keeping each surface optional. Product galleries can stay with the theme, use a full-width swipe layout, or use an editorial image flow while WooCommerce retains product, variation, lightbox, and extension-hook behavior.

Designed for controlled setup

Module settings are kept together under the Codela menu. Features that can contact customers or external endpoints require the relevant module, event, and delivery option to be enabled and configured first.

Shipment tracking includes region-aware carrier link templates. These are links, not carrier API integrations: the plugin does not query carriers in the background. Administrators can add or replace carrier names and HTTPS tracking URL templates.

Codela Commerce Toolkit is translation-ready, includes English and Turkish interface files, and declares compatibility with WooCommerce High-Performance Order Storage (HPOS).

Optional premium package

A separately distributed add-on adds WhatsApp and SMS delivery, advanced checkout customization, PDF and business documents, cart recovery, payment reminders, review collection, stock synchronization, and delivery delay monitoring. It works alongside the free plugin. Premium code is not included in the WordPress.org package, and the included free tools work without a license or Freemius account connection.

Bundled Libraries

Flowboard includes unmodified distribution files from the libraries below. Exact license texts and source references are also included in modules/webhooks/THIRD-PARTY-NOTICES.md.

• React Flow: @xyflow/react 12.10.2, MIT. Source: https://www.npmjs.com/package/@xyflow/react/v/12.10.2
• ELK.js: elkjs 0.12.0, EPL-2.0 OR GPL-3.0-or-later. Codela uses the GPL-3.0-or-later option for WordPress.org distribution. Source: https://www.npmjs.com/package/elkjs/v/0.12.0

Agreements and Consent includes namespace-prefixed PDF runtime libraries. Exact license texts and source references are included in modules/kvkk/THIRD-PARTY-NOTICES.md.

• Dompdf: 3.1.6, LGPL-2.1. Source: https://github.com/dompdf/dompdf
• Dompdf PHP Font Lib: 1.0.2, LGPL-2.1-or-later. Source: https://github.com/dompdf/php-font-lib
• Dompdf PHP SVG Lib: 1.0.2, LGPL-3.0-or-later. Source: https://github.com/dompdf/php-svg-lib
• Masterminds HTML5: 2.10.1, MIT. Source: https://github.com/Masterminds/html5-php
• PHP CSS Parser: 9.4.0, MIT. Source: https://github.com/MyIntervals/PHP-CSS-Parser
• Safe: 2.5.0, MIT. Source: https://github.com/thecodingmachine/safe

External Services

The plugin uses the following external services only in the circumstances described below.

Freemius

The bundled Freemius SDK provides optional account connection, licensing, trials, upgrade checkout, and premium-package updates. If an administrator opts in or uses these features, Freemius may receive site, environment, administrator, account, license, and diagnostic information. Free tools remain available when account connection is skipped.

• Service: https://freemius.com/
• Terms: https://freemius.com/terms/
• Privacy: https://freemius.com/privacy/

Twilio WhatsApp API

When the optional premium WhatsApp module sends a test or an enabled notification, it calls Twilio’s API with the configured credentials, sender and recipient numbers, and message text. The text can contain order or customer details selected by the administrator. No request is made before credentials and delivery options are configured.

• Service: https://www.twilio.com/whatsapp
• Terms: https://www.twilio.com/legal/tos
• Privacy: https://www.twilio.com/legal/privacy

Gravatar

The optional My Account layout uses WordPress’s get_avatar() function when avatars are enabled. Unless the site or another avatar plugin supplies a local image, the browser may request it from Gravatar using a hash of the account email and ordinary request data such as IP address and browser details.

• Service: https://gravatar.com/
• Terms: https://wordpress.com/tos/
• Privacy: https://automattic.com/privacy/

Administrator-configured HTTPS endpoints

Flowboard can send order, customer, notification, support, or operational event data to an HTTPS webhook entered and enabled by an administrator.

The optional consent adapter can send email or phone details, consent status, channel, source, order ID, timestamp, and configured site metadata to an administrator-configured HTTPS endpoint.

The optional stock synchronization module can retrieve a CSV from an administrator-configured HTTPS URL. The server receives ordinary request metadata such as the site’s IP address; no customer or order data is included in that request.

No request is sent to these endpoints until the administrator configures and enables the related feature. The receiving provider and its terms and privacy policy are selected by the administrator.

Carrier tracking pages

The shipment module creates links to public carrier tracking pages. It does not contact a carrier merely by saving or displaying shipment information. When someone opens a tracking link, their browser sends the tracking number in the URL and ordinary request information, such as their IP address and browser details, to that carrier.

Built-in templates can link to the providers below. The linked privacy notices are maintained by each provider:

• Türkiye: Yurtiçi Kargo, Aras Kargo, MNG Kargo, Sürat Kargo, PTT Kargo, HepsiJET, and Kolay Gelsin.
• Europe and global: DHL, DPD, GLS, UPS, and FedEx.
• United States: USPS, UPS, FedEx, and DHL.

Administrators can add or replace carrier URLs. The terms and privacy policy for a custom carrier endpoint depend on the provider selected by the administrator.