內容簡介
Aivastark 外掛為您的 WordPress 網站新增 AI 支援聊天小工具，能夠根據您的知識庫即時回答訪客問題，並在需要時轉接至人類客服，提供 24/7 的服務。
【主要功能】
• 根據知識庫訓練的 AI 聊天功能
• 完全白標化，客製化品牌與顏色
• 潛在客戶捕捉功能
• 實時通知轉接至人類客服
• 在 WordPress 內部進行小工具自訂
• 輕量化設計，非同步載入小工具
外掛標籤
開發者團隊
原文外掛簡介
Aivastark Widget adds the Aivastark AI support chat widget to your WordPress site in seconds. Trained on your own knowledge base, it answers visitor questions 24/7 and hands off to a human agent when needed.
One field. That’s it. Paste your Widget Key from the Aivastark dashboard and the widget is live site-wide. You can also use the [aivastark key="..."] shortcode on individual pages.
Customize without leaving WordPress. Click Connect once to securely link your site to your Aivastark project, then open Aivastark → Customize Widget to edit the widget’s content, colors, AI behavior, and home screen — the full editor, right inside wp-admin. No second login each time.
Features
AI chat trained on your knowledge base (PDFs, URLs, documents)
Fully white-label — your brand, your colors, your logo
Lead capture (trigger by message count, keyword, idle time, or manual)
Live agent handoff via realtime notifications
In-WordPress widget customization via a secure one-click connection (Content, Style, AI, Designer)
Or customize from the Aivastark dashboard — your choice
Domain whitelisting enforced server-side
Conversation and rate limits enforced server-side
Markdown-formatted responses
Lightweight — the widget is loaded asynchronously and never blocks page rendering
Get a Widget Key
You need a free Aivastark account. Sign up at aivastark.com, create a project, and copy the Widget Key from the Integrations page.
Third-party service notice
This plugin is a client for the Aivastark hosted service. To function, it loads the widget script from https://www.aivastark.com/widget.js and chat conversations are processed by the Aivastark backend. Full disclosure of every endpoint and the data sent is in the External services section below.
By installing this plugin you agree to the Aivastark Terms of Service and Privacy Policy.
External services
This plugin connects to the Aivastark hosted service to function. Without this connection there is no chat widget — the plugin cannot work locally only.
1. Widget script (CDN)
What it does: Loads the JavaScript file that renders the chat widget on your site’s front-end.
Endpoint: https://www.aivastark.com/widget.js
When: On every front-end page load where the Widget Key is configured (site-wide or via shortcode).
Data sent: A standard browser HTTP GET — User-Agent, Referer, IP address. No site content, no visitor PII.
2. Chat backend (runtime, browser → Aivastark API)
What it does: Handles the chat conversation between the visitor and the AI assistant.
Endpoint: https://www.aivastark.com/api/* (subdomains may be used; all requests originate from the visitor’s browser, not from the WordPress server).
When: Only when a visitor actively opens the widget and sends a message. No requests are made until the visitor interacts.
Data sent: The visitor’s chat messages, the Widget Key (identifies your project), an anonymous session ID, the page URL the chat was opened from, and standard browser headers. If the visitor submits a lead form inside the widget, the fields they enter (typically name, email, phone) are also sent.
Data sent — only if you enable “Know your logged-in visitors” (off by default): for signed-in visitors only, their WordPress user ID, display name, email address and primary role, so the assistant can address them by name and avoid re-asking for details. Nothing extra is sent for visitors who are not logged in, and the setting can be switched off at any time from Aivastark → Settings.
3. Pairing & customization (optional — only if you click Connect)
What it does: Securely links this WordPress site to one Aivastark project (OAuth Authorization Code + PKCE) and lets you open the widget editor inside wp-admin. The site stores a scoped, revocable access token; only a hashed copy is kept on the server. The token is used to mint a one-time sign-in ticket each time you open the editor.
Endpoints: https://xckrihmmdwddvcwohvaz.supabase.co/functions/v1/wordpress-token and .../wordpress-sso (called from your WordPress server). The connection-approval page https://www.aivastark.com/authorize/wordpress and the editor https://www.aivastark.com/embed/wp/playground are loaded in your browser (the latter inside an iframe in wp-admin).
When: Only after you click Connect (the approval page) and when you open Aivastark → Customize Widget (the editor iframe + ticket). Nothing is sent until you opt in by connecting.
Data sent: Your site URL, the chosen Aivastark project id, and the scoped token. While the editor is open, the changes you make (widget appearance and AI settings) are saved to your Aivastark project. No site content or visitor data is sent by this flow.
Data received: alongside the token, Aivastark returns this project’s signing secret. It is stored locally (autoload off, never displayed) and used only to compute an HMAC of the logged-in user’s ID when Know your logged-in visitors is on, so Aivastark can verify that identity. It is deleted when you disconnect or delete the plugin.
4. Deactivation feedback (optional — only if you click “Submit & Deactivate”)
What it does: When you deactivate the plugin, an optional prompt asks why. If you choose to submit, your selected reason, optional comment, and the email shown (your WordPress account email) are sent to Aivastark to help improve the product.
Endpoint: https://xckrihmmdwddvcwohvaz.supabase.co/functions/v1/wordpress-feedback (called from your WordPress server).
When: Only when you click Submit & Deactivate in the feedback prompt. Clicking Skip & Deactivate or Cancel sends nothing.
Data sent: The reason you selected, your optional comment, the email shown in the prompt, your site URL, the plugin version, and your WordPress version. No site content or visitor data.
Service provider
Provider: Aivastark
Terms of Service: https://www.aivastark.com/terms
Privacy Policy: https://www.aivastark.com/privacy
