PallasMark – Video Proof & Buyer Approval for WooCommerce
Protect your WooCommerce store from “item not as described” disputes, chargebacks, and false damage claims — with automatic video proof of every order before it ships, plus optional buyer approval before the package ever leaves your warehouse.
PallasMark records short video or photo proof of your orders during packing, and can require the buyer to review and approve that proof before you ship. If a dispute or chargeback happens later, you have timestamped, tamper-evident order proof showing exactly what left your warehouse and when — turning a “he said, she said” argument into an open-and-shut case backed by evidence.
Typical use cases: high-value or fragile orders where “item not as described” claims are common, sellers who’ve been burned by chargebacks before, warehouses and 3PLs that want a documented, timestamped fulfillment record, and any WooCommerce store that wants proof of delivery beyond a courier’s tracking number.
This plugin automates the whole connection: paste a one-time connect token from your PallasMark
account, click Connect to PallasMark, and the plugin registers itself with PallasMark and
creates the order.created / order.updated webhooks on WooCommerce’s modern REST API
(wp_api_v3) — using the single webhook secret PallasMark actually verifies, so there’s nothing
left to copy between the two systems by hand.
What this plugin does:
- Adds a WooCommerce → PallasMark settings page.
- On your click, calls PallasMark with your one-time connect token and this store’s URL, receives back a webhook secret, and creates the order webhooks pointed at PallasMark using that secret — no manual webhook setup in WooCommerce → Settings → Advanced → Webhooks, and nothing to copy-paste into PallasMark yourself.
- Re-running “Connect to PallasMark” is safe — it replaces any previous PallasMark webhooks instead of creating duplicates.
What this plugin does NOT do: it does not send any order data anywhere by itself outside of the explicit setup action described above. Once connected, WooCommerce’s own webhook delivery system sends the order payload to PallasMark whenever triggered by real order activity. You still need a PallasMark account to receive and use that data — this plugin is the WooCommerce-side half of the connection, not a full product on its own.
After connecting here, you’ll also need to click Connect WooCommerce inside PallasMark (Integrations page) to grant a read/write REST API key pair — this is what lets PallasMark write the proof link and approval status back onto your orders. The webhook connection alone only lets orders flow in; the REST key is what lets status flow back.
External service disclosure: PallasMark is a hosted Software as a Service product, and this plugin talks to it in two distinct ways:
- Install ping (automatic). On activation, on deactivation, and at most once every 24 hours while active, the plugin sends this site’s own public URL plus the plugin/WordPress/WooCommerce version numbers to PallasMark — nothing else, no order/customer/product data. This lets PallasMark know your store has the plugin installed so we can reach out with setup help if you haven’t connected yet; it does not require or create a PallasMark account. See == Privacy == below.
- Store connection (explicit, your click). When you paste a connect token and click Connect to PallasMark, the plugin (a) calls PallasMark’s registration API with that token and this site’s URL to obtain a webhook secret, and (b) configures WooCommerce to send order-created and order-updated webhook payloads to the PallasMark service going forward. Depending on the order, those payloads may include customer contact, billing, shipping, product, and order-status data.
Use of the service is subject to the PallasMark Terms of Service and Privacy Policy.
Privacy
This plugin sends data to PallasMark (app.pallasmark.com, or a different URL if you’ve configured one on the settings page) in the two situations described above. Summary of what’s sent and when:
- On activate / deactivate / a throttled daily heartbeat: this site’s URL (
home_url()) and the plugin/WordPress/WooCommerce version numbers. No order, customer, or product data — this happens automatically, without a click, so it needs to stay minimal by design. - Only when you click “Connect to PallasMark”: a webhook secret exchange (your connect token
- this site’s URL), and from then on WooCommerce’s own order webhook payloads (which can include customer/order data) for as long as the connection stays active.
Deactivating or uninstalling the plugin stops all of the above. See PallasMark’s Privacy Policy for how that data is handled once received.
Privacy == section for the full breakdown of what’s sent and when.
What happens if I deactivate the plugin?
The webhooks it created remain registered in WooCommerce (visible under WooCommerce → Settings → Advanced → Webhooks) until you delete them manually or reactivate the plugin and re-register (which replaces them). Deactivating the plugin does not disconnect your PallasMark account, and stops the automatic install ping described above.
I previously used the “drProof” plugin — do I need to do anything?
Re-running Register webhooks on this version automatically removes any leftover webhooks from the old plugin name and endpoint, and creates fresh ones pointed at the current PallasMark endpoint.