AvoPay lets your WooCommerce store accept Bitcoin Lightning payments with zero chargebacks, no KYC, and no code changes required. Payments settle directly to your self-custodial AQUA wallet — no middleman, no custodian.
Order payment data (swap IDs, invoice hashes, claim keys) is stored in WooCommerce order meta and is preserved when the plugin is uninstalled, as it constitutes a financial audit trail. Plugin configuration data (API key, wallet fingerprint, logs table) is deleted automatically on uninstall. An optional “Delete AvoPay data on uninstall” setting is available in WooCommerce > Settings > Payments > AvoPay if you prefer full cleanup.
This plugin connects to the following third-party services. By activating this plugin you acknowledge that data will be transmitted to these services as described below.
The AvoPay API (api.avopay.dev) is the payment processing backbone. It handles fiat-to-sats conversion, Bitcoin address derivation, ephemeral keypair generation, and HTLC claim broadcasting.
What data is sent: the merchant’s API key (used as an identifier), the WooCommerce order ID, the order amount, and the store currency. No customer personal data (name, email, address) is ever transmitted to this service.
When it is sent: on every payment at checkout.
Privacy Policy · Terms of Service
Boltz Exchange (api.boltz.exchange) is a non-custodial atomic swap provider. AvoPay uses it to create Lightning-to-Liquid Bitcoin reverse swaps so payments are routed to the merchant’s self-custodial AQUA wallet.
What data is sent: swap amount in satoshis, an ephemeral claim public key, a refund public key, and a generated swap ID. No customer personal data is transmitted.
When it is sent: at payment creation (swap setup) and during settlement (status polling and cooperative claim).
Privacy Policy · Terms of Service
Blockstream’s public Esplora API (blockstream.info/liquid) is used to detect incoming Liquid Bitcoin (L-BTC) transactions when a customer pays via the L-BTC Direct payment tab.
What data is sent: the merchant’s Liquid wallet address, to query whether an incoming transaction has been received. No customer personal data is transmitted.
When it is sent: periodically while the customer has the L-BTC Direct tab open at checkout.
Privacy Policy · Terms of Service
CoinGecko (api.coingecko.com) provides live BTC exchange rates used to calculate the satoshi amount for each order.
What data is sent: the store currency code only (e.g. “EUR” or “USD”). No personal data is transmitted.
When it is sent: at payment creation.
Privacy Policy · Terms of Service
CoinCap (api.coincap.io) is used as a fallback BTC rate source if CoinGecko is unavailable.
What data is sent: no parameters; no personal data is transmitted.
When it is sent: only if CoinGecko is unreachable at payment creation.
Privacy Policy · Terms of Service
This plugin includes qrcodejs, a JavaScript QR code generator.
Original QR code algorithm by Kazuhiko Arase.
JavaScript port: https://github.com/davidshimjs/qrcodejs
Licensed under the MIT License.