Kodo – Affiliate Marketing for WooCommerce

This plugin connects your WooCommerce store to Kodo, an online service that helps brands run influencer marketing campaigns. A Kodo account is required for the plugin to do anything — Kodo offers a free tier as well as paid plans.

What is Kodo?

Kodo is a service that helps online stores work with influencers (such as social-media creators) to sell more products with tracking the sales informations. A enterprise signs up for Kodo, invites influencers to promote its store, and gives each influencer a personal link and/or a discount code to share with their audience.

When shoppers buy through those links or codes, Kodo keeps track of which influencer brought in each sale and works out how much commission that influencer has earned. The enterprise manages everything (its influencers, links, discount codes, and payouts) from the Kodo website at withkodo.com. Kodo does all the tracking and commission math; the store owner doesn’t have to match up links, codes, and orders by hand.

What does this plugin do?

On its own, this plugin does nothing visible to your shoppers. Its only job is to be the bridge between your WooCommerce store and your Kodo account so the two can share information automatically. After you connect it, the plugin quietly:

• Notices when a shopper arrives from an influencer. If someone visits your store through a special Kodo link, the plugin remembers which influencer sent them and attaches that information to their order.
• Tells Kodo about each sale. When an order is placed, the plugin sends the order’s details to Kodo so Kodo can credit the right influencer and calculate their commission. This happens in the background and does not slow down your store.
• Adds influencer discount codes to your store. When you create a discount code for an influencer inside the Kodo dashboard, it automatically appears in your store as a normal WooCommerce coupon, so you don’t have to re-enter it by hand.
• Connects your store to Kodo. A simple one-time “Connect” step links your store to your Kodo account and safely saves the login details needed for the two to talk to each other.

The plugin never decides on its own who earns commission or how much. It only passes information back and forth. All of the actual decisions and calculations happen on the Kodo service.

You need a Kodo account

To use this plugin you must have a Kodo account. Kodo offers a free tier for stores getting started, with paid plans for higher usage limits and advanced features. When you click “Connect,” you’ll be taken to withkodo.com to sign in or sign up. The plugin itself is free and open-source, but it has nothing to do until it is connected to a Kodo account.

By using this plugin you agree to Kodo’s Terms of Use and Privacy Policy.

A note for store owners: Because this plugin sends order information to Kodo (see the “External Services” section below for exactly what), you are responsible for letting your customers know about Kodo in your own store’s privacy policy, as required by the laws that apply to you.

External Services

This plugin connects your WooCommerce store to Kodo, a third-party influencer-attribution and commission service operated by Kodo. The plugin does not function without this connection. Below is every external endpoint the plugin contacts, what it sends, and when.

The Kodo platform is reached at two hosts:

• Kodo web app — https://www.withkodo.com (the dashboard you sign in to)
• Kodo backend API — https://bfakqzjzdwruyyhcfnbo.supabase.co (Kodo’s server-side API)

1. Connect handshake (web app redirect)

• Endpoint: https://www.withkodo.com/api/woocommerce/install
• When: Once, when an administrator clicks Connect on the Kodo settings screen. This redirects the browser to Kodo to sign in and authorize the store.
• Data sent: Your store URL and a single-use connection token generated by the plugin. No order or customer data is sent at this step.

2. API key issuance (backend API)

• Endpoint: https://bfakqzjzdwruyyhcfnbo.supabase.co/functions/v1/wc-issue-api-key
• When: Immediately after you authorize the store in the Kodo dashboard, to exchange a one-time issue token for a long-lived API key.
• Data sent: Your store URL, your Kodo enterprise (account) identifier, and the single-use issue token (sent in a request header). The plugin receives back an API key and a webhook secret, which are stored in your site options and never exposed publicly.

3. Transaction reporting (backend API)

• Endpoint: https://bfakqzjzdwruyyhcfnbo.supabase.co/functions/v1/transaction-wc
• When: In the background shortly after each order is placed (and on automatic retries if a send fails). Sent only while the store is connected.
• Data sent (per order):
  • Store URL and plugin version
  • Order ID, order number, order status, and order timestamp
  • Currency and monetary fields: subtotal, discount, tax, shipping, and total
  • Per line item: product/variant IDs and names, quantity, and prices
  • Referral handle (the ?ref= value), any discount code used, the landing URL, and the landing timestamp
  • A SHA-256 hash of the customer’s email address (never the plaintext email)
  • The customer’s billing country and the first 3 characters only of the billing postal code
• Data never sent: customer name, full email address, full postal code, street address, phone number, payment method, card data, or IP address.

Authentication & secrets

All requests to the Kodo backend are authenticated with the API key in an Authorization header. The API key is never logged, never placed in a URL, and never included in a request body.

Inbound (Kodo → your store)

After connecting, Kodo may call back to two REST endpoints the plugin registers under the kodo/v1 namespace: one to complete the connection handshake, and one to push influencer discount codes into your store as WooCommerce coupons. These inbound requests are verified with the credentials established during the Connect handshake (a token check and an HMAC signature, respectively). The plugin itself does not initiate these calls.