RocketCart – Abandoned Cart Recovery

RocketCart captures abandoned checkouts on your WooCommerce store and forwards them to the RocketCart cart-recovery platform at app.getrocketcart.com, which sends the recovery messages, optimizes templates and send-timing, and gives you a real-time dashboard of recovered revenue — right inside wp-admin.

The plugin is a thin client: it never sends email from your WordPress server, never renders recovery templates locally, and never stores long-term campaign data on your site. The heavy lifting lives at RocketCart, so your WordPress site stays fast.

What it does

• Captures abandoned carts from WooCommerce in real time — line items, quantities, prices, currency, and the customer’s email/phone when they enter it at checkout.
• Forwards cart events to app.getrocketcart.com over a reliable, queued sync built on Action Scheduler.
• One-click connect — an OAuth-style consent flow provisions your API key automatically; no copy-pasting keys from an external dashboard.
• One-click recovery links — each recovery message contains a single-use link that rebuilds the shopper’s exact cart and drops them straight on your checkout page.
• Conversion tracking — when a recovered shopper completes their order, the plugin marks the cart recovered and reports it back so your stats reflect real recovered revenue.
• Recovery discounts (optional) — when you enable a discount, RocketCart mints a real, single-use WooCommerce coupon on your store, scoped to the shopper.
• Custom sending domain (optional) — send recovery email from your own domain. The platform manages SPF/DKIM/DMARC and shows you the exact DNS records to add.
• In-admin dashboard — recovered revenue, carts tracked, recovery rate, and average cart value, plus your recent recovered orders.

Requirements

• WordPress 6.8 or higher
• PHP 8.1 or higher
• WooCommerce 8.0 or higher

A RocketCart account is required

This plugin is a client for the RocketCart cart-recovery service. You create a free RocketCart account during the one-click connect step. Recovery messaging, template optimization, and reporting are performed by that service. See “Third-Party Services” below for exactly what data is sent and why.

Third-Party Services

RocketCart sends cart and customer data to the RocketCart cart-recovery service at https://app.getrocketcart.com so that service can send recovery messages and attribute recovered revenue. The plugin is the only component that talks to that service; no third-party CDN, analytics, or font network is contacted from your WordPress site.

What is sent (cart sync):

• Customer email address, only when the customer enters it during checkout.
• Customer phone number, only when the customer enters one (e.g. the WooCommerce checkout phone field). Whitespace is stripped; the value is otherwise forwarded verbatim so the service can message in international (E.164) format.
• Cart identifier, cart line items (product title, SKU, quantity, unit price, currency), and cart subtotal.
• When a recovered cart converts: the WooCommerce order id and any coupon codes applied to that order, so the service can attribute the recovery and measure discount usage.
• Your WordPress site URL (home_url()) and the plugin version, sent as the User-Agent and as a dedicated X-RocketCart-Site header so the service can route and audit by site.

What is sent (Connect handshake — one-time, on first connection):

• When you click “Connect to RocketCart” the plugin opens an OAuth-style consent page on app.getrocketcart.com, passing your site URL and a single-use random state nonce. After you sign in / sign up, the service redirects back to your wp-admin with a single-use provision_token, which the plugin exchanges server-to-server for a long-lived API key. The API key is stored encrypted in the WordPress options table and is never exposed in the browser.

What is sent (single sign-on, when you click “RocketCart Dashboard”):

• A short-lived sign-in request authenticated by your API key, returning a one-time login URL the plugin opens in a new tab. Your WordPress user email and display name are sent so the service can match you to your account; no password is transmitted.

What is sent (custom sending domain, only if you enable it):

• The “from” email address you choose, so the service can generate the DKIM keys and DNS records for sending recovery email from your domain.

Why it is sent: RocketCart composes, sends, and measures recovery messages on your behalf. No recovery email is sent from your WordPress server.

When it is sent: Cart-sync traffic flows only after you have connected your site. The Connect handshake, SSO sign-in, and custom-domain requests fire only when you explicitly perform those actions in wp-admin.

Terms and privacy:

• Terms of service: https://getrocketcart.com/terms-and-conditions/
• Privacy statement: https://getrocketcart.com/privacy-statement/

RocketCart, Inc. is the data processor for information sent through this plugin.