=== Wasl Cart - OTP & COD Verification for WooCommerce ===
Contributors: isadev, innovativesunagency
Tags: woocommerce, cod, otp, order-verification, checkout
Requires at least: 6.0
Tested up to: 7.0
Requires PHP: 8.0
Stable tag: 0.1.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

COD-focused WhatsApp OTP verification for WooCommerce with order sync to Wasl Cart SaaS. Requires a Wasl Cart account.

== Description ==

**Wasl Cart** is built for merchants who struggle with fake cash-on-delivery orders. It verifies shoppers with WhatsApp one-time codes at checkout, then syncs verification status into your Wasl Cart dashboard - not a generic email/SMS OTP plugin.

= What makes it different =

* **COD workflow first** — optional WhatsApp OTP only when Cash on Delivery is selected
* **SaaS dashboard sync** — verification status and order handoff to [Wasl Cart](https://app.waslcart.online), not just a local flag
* **Consent-aware abandoned checkout** — optional cart recovery handoff without storing Meta tokens in WordPress
* **HMAC-signed connector** — store public key + secret only; WhatsApp / Meta credentials stay on the SaaS

= External SaaS required =

This plugin is a **connector**. Messaging, OTP delivery, billing, and WhatsApp credentials run on the **Wasl Cart** cloud service operated by Innovative Sun Agency (ISA).

* A free plugin install is not enough - you need a [Wasl Cart account](https://app.waslcart.online) and an **active paid subscription** (or approved trial) with message credits.
* Store credentials (public key + signing secret) are created in the Wasl Cart dashboard and entered in WooCommerce → Wasl Cart. WhatsApp / Meta tokens are **never** stored in WordPress.
* Order, checkout, and phone data needed for verification are sent over HTTPS HMAC-signed requests to `https://app.waslcart.online` (or your configured SaaS base URL).

= Links =

* Product site: [https://waslcart.online](https://waslcart.online)
* WooCommerce plugin page: [https://waslcart.online/woocommerce.php](https://waslcart.online/woocommerce.php)
* App / dashboard: [https://app.waslcart.online](https://app.waslcart.online)
* Pricing: [https://waslcart.online/pricing.php](https://waslcart.online/pricing.php)
* Privacy Policy: [https://waslcart.online/privacy-policy](https://waslcart.online/privacy-policy)
* Terms: [https://waslcart.online/terms-and-conditions](https://waslcart.online/terms-and-conditions)
* Refund Policy: [https://waslcart.online/refund-policy](https://waslcart.online/refund-policy)
* Data Deletion: [https://waslcart.online/data-deletion](https://waslcart.online/data-deletion)

= Features =

* COD WhatsApp OTP at checkout (configurable)
* HMAC-signed API connection to Wasl Cart SaaS
* Order sync and verification status meta for merchants
* Optional abandoned-checkout handoff (consent-aware)
* No card collection inside the plugin - billing is handled in Wasl Cart

== Installation ==

1. Upload the `wasl-cart` folder to `/wp-content/plugins/` or install the ZIP via Plugins → Add New → Upload.
2. Activate the plugin (WooCommerce must be active).
3. Create a store in [Wasl Cart](https://app.waslcart.online) and copy the public key + secret.
4. Go to WooCommerce → Wasl Cart, set SaaS URL `https://app.waslcart.online`, paste credentials, and click **Connect / test connection**.
5. Enable COD OTP as needed and place a test COD order.

== Frequently Asked Questions ==

= Does this plugin send WhatsApp messages by itself? =

No. WordPress only calls the Wasl Cart API. WhatsApp Cloud API / Meta credentials stay on the SaaS.

= Is an account required? =

Yes. You need a Wasl Cart account and an active plan with credits for messaging features.

= Where is my data stored? =

Operational order and customer contact data used for verification are processed by Wasl Cart under the Privacy Policy. See [Data Deletion](https://waslcart.online/data-deletion) for removal requests.

= Can I remove plugin data on uninstall? =

Yes. Enable **Delete Wasl Cart data on uninstall** under WooCommerce → Wasl Cart before removing the plugin.

= How is this different from other OTP plugins? =

Wasl Cart focuses on COD fraud reduction via WhatsApp verification and syncs results to a dedicated merchant dashboard (billing, credits, inbox). It is not a general-purpose email/SMS OTP form plugin.

== Screenshots ==

1. Wasl Cart settings — connect SaaS API keys and enable COD OTP
2. COD checkout WhatsApp OTP verification prompt
3. Order screen showing Wasl OTP verified status
4. Billing and plan deep-links to the Wasl Cart dashboard

== Changelog ==

= 0.1.1 =
* Text domain aligned to slug `wasl-cart`
* Fixed Plugin URI to a public working URL
* Contributors updated (`isadev`)
* Softened billing CTAs on the settings screen (Guideline 11)
* Clarified COD/WhatsApp differentiation in readme

= 0.1.0 =
* Initial WordPress.org-ready release packaging
* External SaaS disclosure, uninstall cleanup option, privacy exporters
* HPOS-compatible order meta column hooks

== Upgrade Notice ==

= 0.1.1 =
Reviewer fixes: text domain, Plugin URI, contributors. No breaking option-key changes.

= 0.1.0 =
First public directory package. Back up settings before upgrading.
