About this plugin
This independent plugin lets a merchant connect WooCommerce to Tosla İşim Sanal POS and accept 3D Secure payments. It is not affiliated with, endorsed by or an official product of Tosla or AkÖde.
- Classic and block checkout support
- 3D Secure callback hash validation and payment inquiry
- Installment and commission information
- Order notes and privacy-safe transaction logs for the last seven days
- Deferred 3D Secure verification to close abandoned payment attempts safely
External services
This plugin connects to the Tosla İşim payment service operated by AkÖde. The connection is required for the payment gateway to function.
The service is contacted in the following situations:
- When a store administrator saves the gateway settings, to verify the API credentials.
- When a customer enters the first six card digits, to request available installment and commission information if the merchant account supports installments.
- When a customer places an order, to create a 3D Secure payment session.
- After Tosla returns the customer to the store, to verify the signed callback and confirm the payment status.
- When a store administrator requests a full or partial refund from WooCommerce.
- When a scheduled check confirms the status of an unfinished 3D Secure payment.
Depending on the operation, the plugin sends the Tosla İşim API the merchant API credentials, order reference, amount, currency, installment count, callback URL, store domain and WordPress/WooCommerce version information. Cardholder name, card number, expiry date and CVV are processed transiently during checkout and then submitted from the customer’s browser to Tosla’s HTTPS 3D Secure card form. They are not persisted by the plugin.
Tosla İşim service information and merchant registration:
com/auth/register/
Tosla İşim privacy disclosure:
com/isim/tosla-isim-kvkk-aydinlatma
By enabling this gateway, the store owner agrees to use the Tosla İşim service under the terms presented by Tosla and AkÖde.
Privacy
The plugin does not store card numbers, expiry dates, CVV values or full callback payloads. Tosla API credentials are stored in the WordPress options table as part of the WooCommerce payment gateway settings and are available only to authorized store administrators. A sanitized payment failure message may be stored in the related WooCommerce order note; a one-time copy used to show the checkout error is deleted after it is displayed.
The plugin keeps a privacy-safe transaction event log containing the WooCommerce order ID, event type, payment type and timestamp. Entries are automatically deleted after seven days and the log is removed when the plugin is uninstalled.
Store owners remain responsible for informing customers about the Tosla İşim payment service and maintaining an appropriate privacy notice for their store.
Support
com. org support forum once the plugin is published.