WooCommerce integration¶
Beta — Integration details
This integration's setup steps are based on standard WooCommerce REST API patterns. Specific API credentials, webhook configuration, and data sync flows will be verified against the live Dxtra application. If you encounter differences, please report an issue.
Integrate your self-hosted WooCommerce store with Dxtra to automate privacy compliance, handle data subject requests, and manage customer consent preferences.
Overview¶
WooCommerce stores substantial customer data—names, emails, billing and shipping addresses, phone numbers, orders, subscriptions, and download history. Dxtra integrates with your WooCommerce REST API to discover this data, fulfill access and deletion requests, and propagate consent changes across your platforms.
Unlike pre-built integrations (like Shopify), WooCommerce is self-hosted and requires setup via API webhook connection or custom processor configuration. This gives you full control over what data Dxtra can access.
What you can do¶
- Access Requests — Export customer names, emails, addresses, phone, order history, and subscription data
- Deletion Requests — Delete customer accounts and associated data from WooCommerce
- Consent Management — Sync email marketing preferences and manage unsubscribe workflows
- Data Discovery — Automatically identify personal data stored in orders, subscriptions, and customer metadata
- Preference Propagation — Update opt-out status across email platforms when customer unsubscribes
Prerequisites¶
- Self-hosted WooCommerce store (WooCommerce 4.0+)
- WordPress admin access
- Dxtra workspace with admin access
- PHP 7.4 or higher
- TLS 1.2+ support for secure API communication
Setup instructions¶
Option 1: Custom Processor (Recommended)¶
If WooCommerce is not in the Select Processor dropdown, use the custom processor option:
- Go to Processors in your Dxtra dashboard
- Click Select Processor → scroll to bottom
- Select Add Processor (custom integration)
- Choose WooCommerce REST API
- Generate a WooCommerce API credential:
- WordPress Admin → WooCommerce → Settings → Advanced → REST API
- Click "Create an API Key"
- Set Permissions to "Read/Write"
- Copy the Consumer Key and Consumer Secret
- Paste credentials into Dxtra wizard
- Click "Confirm and Onboard"
Option 2: Webhook Connection¶
For real-time data sync, configure webhooks:
- Go to WordPress Admin → WooCommerce → Settings → Advanced → Webhooks
- Click "Add webhook"
- Set the following webhook events:
customer.createdcustomer.updatedcustomer.deletedorder.createdorder.updatedorder.deleted- Delivery URL:
https://conduit.dxtra.ai/api/v1/integrations/woocommerce/event?did={YOUR_DID}&token={YOUR_API_TOKEN} - Replace
{YOUR_DID}with your Dxtra organization ID (found in Processors page) - Replace
{YOUR_API_TOKEN}with your Dxtra API token - Click "Save webhook"
- Test webhook delivery (WordPress will show delivery status)
Verify Connection¶
Once configured:
- Return to Dxtra Manage Processors table
- WooCommerce should show "Interconnected" status
- Test with a customer access request to confirm data retrieval
- Check WordPress logs for any API errors
Data covered¶
| Data Category | Details |
|---|---|
| Customer information | Name, email, phone, billing address, shipping address |
| Order history | Order ID, date, items, totals, payment method, status |
| Subscription data | Subscription status, billing interval, renewal dates |
| Download history | Digital product downloads, license keys |
| Customer metadata | Custom fields, notes, tags, affiliate information |
Data Dxtra Does NOT Access
Dxtra never receives stored credit card data, PayPal tokens, or other payment credentials. WooCommerce keeps payment data separated and PCI-compliant.
How data subject rights work¶
Access Requests¶
When a customer emails requesting their data:
- Create a DSRR in Dxtra with the customer's email address
- Dxtra queries WooCommerce API for:
- All customer account information
- Complete order history with items and amounts
- Subscription data (if using WooCommerce Subscriptions)
- Digital download history
- Any custom fields or metadata
- Export data in CSV or JSON format
- Deliver to customer (keep documentation of fulfillment)
Deletion Requests¶
When a customer requests erasure:
- Verify their identity (email confirmation or manual verification)
- Create a deletion DSRR in Dxtra
- Select deletion options:
- Delete customer account and contact data
- Pseudonymize order records (keep totals/dates for accounting, remove names/emails)
- Delete subscription records
- Delete download history
- Dxtra executes deletion via WooCommerce REST API
- Confirm completion to customer
Order Record Retention
WooCommerce and accounting law (varies by jurisdiction) may require retaining order information for tax purposes. Dxtra can delete personally identifying information while retaining anonymized transaction records.
Configuration options¶
Data Scope¶
Control what data Dxtra can access:
- Customer data — Names, emails, addresses, phone numbers
- Order data — Order history, items purchased, transaction amounts
- Subscription data — Subscription status, billing cycles (if applicable)
- Metadata — Custom fields, customer notes, tags
- Download history — Digital product downloads (if applicable)
Sync Frequency¶
- Real-time (Webhooks) — Data syncs immediately when changes occur in WooCommerce
- Scheduled (API) — Dxtra queries WooCommerce at set intervals (hourly/daily)
- Manual — Trigger sync only when creating a DSRR
Choose based on store size and update frequency.
Troubleshooting¶
Connection Not Established¶
- Verify API credentials are correct in Dxtra
- Check WordPress REST API is enabled (WooCommerce → Settings → Advanced → REST API)
- Ensure firewall/hosting provider allows outbound HTTPS requests
- Test API access: from terminal, run
curl https://yourstore.com/wp-json/wc/v3/customers -u key:secret
Webhook Delivery Failures¶
- Check WordPress Admin → WooCommerce → Settings → Advanced → Webhooks
- Click the webhook to view delivery logs and error messages
- Verify Dxtra webhook URL includes
didandtokenparameters - Ensure URL is HTTPS (not HTTP)
- Check Dxtra status page for any service issues
Missing Customer Data¶
- Verify customer email is spelled correctly in both WooCommerce and DSRR
- Confirm customer account exists in WordPress → Users
- Check customer is not blocked or in spam state
- Verify WooCommerce REST API scopes include customer read permissions
Deletion Fails¶
- Confirm customer account is not a WordPress administrator
- Check for pending orders in fulfillment (cancel or complete first)
- Verify there are no other plugins locking customer records
- Check WordPress database for corruption (run WP-CLI
wp db check)
Best practices¶
- Use Staging First — Test the integration on a staging/development store before production
- Document API Credentials — Store API keys securely (use a secrets manager, not plain text)
- Monitor Webhooks — Regularly check WordPress webhook delivery logs for failures
- Keep WooCommerce Updated — Apply security patches to WordPress and WooCommerce monthly
- Audit Data Access — Periodically review which customer data is being synced to Dxtra
- Train Your Team — Ensure staff knows how to create DSRRs and fulfill requests
Security considerations¶
- API Credentials — Store Consumer Key and Secret securely (never in version control)
- TLS Encryption — All communication with WooCommerce API is encrypted in transit
- Data Retention — Dxtra stores WooCommerce data only while DSRR is active, then deletes
- Access Logs — Dxtra logs all API access and data retrieval for compliance audit trails
- No Third-Party Sharing — Dxtra never shares your WooCommerce data with external services
Compatibility¶
WordPress and WooCommerce Versions¶
- WordPress 5.0+
- WooCommerce 4.0+
- PHP 7.4+
Popular WooCommerce Extensions¶
Dxtra works with:
- WooCommerce Subscriptions
- WooCommerce Bookings
- Affiliate WP
- WooCommerce PDF Invoices
- WooCommerce Membership
Custom Plugins
If you use custom plugins that store customer data in separate database tables, contact support@dxtra.ai to discuss options for including that data in DSRRs.
Related integrations¶
- Shopify Integration — For Shopify stores (simpler setup)
- Email Marketing — Connect Klaviyo, Mailchimp to sync consent
- CRM Integrations — Sync customer data with Salesforce, HubSpot
Support¶
Having trouble with your WooCommerce integration?
- Email — support@dxtra.ai
- Dashboard chat — Bottom-right corner of Dxtra app
- Documentation — Data Subject Rights Workflow
- Status page — Check Dxtra API status at status.dxtra.ai
Next step: Connect email marketing platforms or payment processors to manage consent and data across your entire business.