Backhaven for WooCommerce

Backhaven for WooCommerce is a free plugin that connects your store to Backhaven, an online backup service. Once connected, the service backs up your store data automatically, so you can find and restore a product, a page or a customer when something goes wrong.

This plugin relies on an external service. The plugin itself does not store any backup. com.

Nothing is sent to the service until you tick the consent box and click “Connect” on the WooCommerce > Backhaven page. The “External services” section below lists exactly what is sent, and when.

What the service backs up:

• Products, with their variations and images

• Product categories and product tags

• Customers

• Orders

• Coupons

• Pages and posts

How it works:

• Go to WooCommerce > Backhaven, read what is sent, tick the consent box and click “Connect”.

• WooCommerce shows its own approval screen. When you approve, WooCommerce creates an API key for Backhaven and gives it to the service.

• The service reads your data through this plugin, page by page, using that key. The plugin reads your data through the official WooCommerce and WordPress REST APIs, so variable products come with all their variations in one request.

• When you change something, the plugin tells the service which items changed (their ids only), and the service backs them up within minutes.

You can disconnect at any time from the same page: the API key created for Backhaven is deleted, and the service can no longer access your store.

The plugin works with both WooCommerce order storage modes (High-Performance Order Storage and posts storage).

Free and paid

The plugin is free and has no locked features.

The Backhaven service has a free plan. Paid plans (Essential, Growth, Pro and Business), for stores with more orders each month, are planned but cannot be bought yet: today nothing can be paid, and neither the plugin nor the service asks for payment details. Before paid plans open, their prices and limits will be published on the Backhaven website and in this readme.

External services

com). It is required: without it, the plugin does nothing. Data is sent only after you give your consent on the WooCommerce > Backhaven page, and only in the cases below.

• When you click “Connect”, the plugin sends your store address and the versions of WordPress, WooCommerce, PHP and the plugin to the service.

• When you approve the connection on the WooCommerce screen, WooCommerce sends a new API key (read and write access) directly to the service. Backhaven uses it to back up your data, and to restore it when you ask.

• At every backup, the service reads, through the routes of this plugin: products (with their variations and images), product categories and tags, customers (names, usernames, email and postal addresses, phone numbers), orders (with the buyer’s contact details and addresses, IP address, browser and order notes), coupons, pages and posts, as well as your store name and admin email address (used to send you backup reports).

• When something changes in your store (a product, an order, a customer, a coupon, a category, a tag, a page or a post is created or updated), the plugin sends the service the ids of the changed items, and only their ids, so that the service can back them up within minutes. This runs in the background with Action Scheduler (included in WooCommerce) and never slows down your pages or your checkout. Action Scheduler runs when your site has visits (or through WP-Cron), so on a quiet site these real-time backups can be delayed; the scheduled backup always catches up.

• When you ask for a restore in the Backhaven dashboard, the service writes the backed-up data back to your store: categories, tags, products, product images, customers and coupons through the WooCommerce REST API, and pages and posts through this plugin. Customer passwords and marketing consents are never written, and a restored customer account does not receive the “Your account has been created” email (the customer sets a new password with “Lost your password?”). A copy of the current state is taken first, so a restore can be undone.

• When you click “Open dashboard”, the plugin asks the service for a single-use sign-in link (valid two minutes), then opens the Backhaven dashboard on the service’s own website, in a new tab.

• When you click “Disconnect” or delete the plugin, the plugin tells the service that the store is disconnected.

The first call, when you click “Connect”, is not signed, because the service has not given your store its secret yet: it carries only your store address and the versions listed above. After the connection, every call from the plugin to the service (disconnection, change notifications, dashboard link) is signed with a secret that the service gave to your store, and the service refuses a call whose signature does not match or that is more than five minutes old.

The Backhaven dashboard is a website of the service, opened in a new tab. It is never embedded in your WordPress admin (no iframe), and the plugin does not load any script or style from the service or from a third-party server: everything the plugin shows in your admin comes from the plugin itself.

Backups are stored by the service on Cloudflare R2 storage. The API key is kept encrypted by the service.

• Backhaven terms of use: https://woo-backup.expert-ecom.com/terms

• Backhaven privacy policy: https://woo-backup.expert-ecom.com/privacy