Aivastark Widget

Aivastark Widget adds the Aivastark AI support chat widget to your WordPress site in seconds. Trained on your own knowledge base, it answers visitor questions 24/7 and hands off to a human agent when needed.

One field. That’s it. Paste your Widget Key from the Aivastark dashboard and the widget is live site-wide. You can also use the [aivastark key="..."] shortcode on individual pages.

Customize without leaving WordPress. Click Connect once to securely link your site to your Aivastark project, then open Aivastark → Customize Widget to edit the widget’s content, colors, AI behavior, and home screen — the full editor, right inside wp-admin. No second login each time.

Features

• AI chat trained on your knowledge base (PDFs, URLs, documents)
• Fully white-label — your brand, your colors, your logo
• Lead capture (trigger by message count, keyword, idle time, or manual)
• Live agent handoff via realtime notifications
• In-WordPress widget customization via a secure one-click connection (Content, Style, AI, Designer)
• Or customize from the Aivastark dashboard — your choice
• Domain whitelisting enforced server-side
• Conversation and rate limits enforced server-side
• Markdown-formatted responses
• Lightweight — the widget is loaded asynchronously and never blocks page rendering

Get a Widget Key

You need a free Aivastark account. Sign up at aivastark.com, create a project, and copy the Widget Key from the Integrations page.

Third-party service notice

This plugin is a client for the Aivastark hosted service. To function, it loads the widget script from https://www.aivastark.com/widget.js and chat conversations are processed by the Aivastark backend. Full disclosure of every endpoint and the data sent is in the External services section below.

By installing this plugin you agree to the Aivastark Terms of Service and Privacy Policy.

External services

This plugin connects to the Aivastark hosted service to function. Without this connection there is no chat widget — the plugin cannot work locally only.

1. Widget script (CDN)

• What it does: Loads the JavaScript file that renders the chat widget on your site’s front-end.
• Endpoint: https://www.aivastark.com/widget.js
• When: On every front-end page load where the Widget Key is configured (site-wide or via shortcode).
• Data sent: A standard browser HTTP GET — User-Agent, Referer, IP address. No site content, no visitor PII.

2. Chat backend (runtime, browser → Aivastark API)

• What it does: Handles the chat conversation between the visitor and the AI assistant.
• Endpoint: https://www.aivastark.com/api/* (subdomains may be used; all requests originate from the visitor’s browser, not from the WordPress server).
• When: Only when a visitor actively opens the widget and sends a message. No requests are made until the visitor interacts.
• Data sent: The visitor’s chat messages, the Widget Key (identifies your project), an anonymous session ID, the page URL the chat was opened from, and standard browser headers. If the visitor submits a lead form inside the widget, the fields they enter (typically name, email, phone) are also sent.

3. Pairing & customization (optional — only if you click Connect)

• What it does: Securely links this WordPress site to one Aivastark project (OAuth Authorization Code + PKCE) and lets you open the widget editor inside wp-admin. The site stores a scoped, revocable access token; only a hashed copy is kept on the server. The token is used to mint a one-time sign-in ticket each time you open the editor.
• Endpoints: https://xckrihmmdwddvcwohvaz.supabase.co/functions/v1/wordpress-token and .../wordpress-sso (called from your WordPress server). The connection-approval page https://www.aivastark.com/authorize/wordpress and the editor https://www.aivastark.com/embed/wp/playground are loaded in your browser (the latter inside an iframe in wp-admin).
• When: Only after you click Connect (the approval page) and when you open Aivastark → Customize Widget (the editor iframe + ticket). Nothing is sent until you opt in by connecting.
• Data sent: Your site URL, the chosen Aivastark project id, and the scoped token. While the editor is open, the changes you make (widget appearance and AI settings) are saved to your Aivastark project. No site content or visitor data is sent by this flow.

4. Deactivation feedback (optional — only if you click “Submit & Deactivate”)

• What it does: When you deactivate the plugin, an optional prompt asks why. If you choose to submit, your selected reason, optional comment, and the email shown (your WordPress account email) are sent to Aivastark to help improve the product.
• Endpoint: https://xckrihmmdwddvcwohvaz.supabase.co/functions/v1/wordpress-feedback (called from your WordPress server).
• When: Only when you click Submit & Deactivate in the feedback prompt. Clicking Skip & Deactivate or Cancel sends nothing.
• Data sent: The reason you selected, your optional comment, the email shown in the prompt, your site URL, the plugin version, and your WordPress version. No site content or visitor data.

Service provider

• Provider: Aivastark
• Terms of Service: https://www.aivastark.com/terms
• Privacy Policy: https://www.aivastark.com/privacy