OneShopLab

OneShopLab is a hosted service that audits product pages and writes better titles, descriptions, tags and product images with AI. This plugin is the bridge between your WooCommerce shop and your OneShopLab account — it requires a OneShopLab account to do anything (see External services below).

Nothing is ever written to your shop on its own. OneShopLab proposes; you approve, in OneShopLab; only then does the plugin write the approved change into the product.

What the plugin does

• Sends your published products to OneShopLab — right after you save one, and the whole catalogue whenever you ask. No public-storefront scraping.
• Applies the changes you approve in OneShopLab (“Apply to store”) right away. OneShopLab notifies the plugin over a signed webhook; the plugin then fetches the approved change and writes it into the product. Images are copied into your own media library, never hot-linked.
• Refuses to overwrite a product you edited in the meantime. Before writing, it compares a hash of the current value with the one OneShopLab recorded at approval time; if they differ, the change is reported as a conflict and nothing is written.
• Never deletes your files. An image operation can take a photo off a product, but the file always stays in your media library.
• Tells you when your shop cannot apply something: a Diagnostics list checks that images can be saved, that your server can reach OneShopLab, that scheduled tasks run, and that PHP has enough memory — each with the fix in plain words.

Who it is for

Shops with a WooCommerce catalogue and a OneShopLab account, from a handful of products to several thousand. It suits merchants who want AI-written product copy and images but want to review every change before it goes live, and who would rather not copy and paste between two dashboards.

Languages

English, French, Spanish, German and Italian. The plugin follows your WordPress language automatically; there is nothing to configure.

What it does not touch

Orders, customers, carts, checkout, payments, users, coupons and settings are never read and never sent anywhere. The plugin reads product data only.

External services

This plugin requires the third-party service OneShopLab (https://oneshoplab.com) and does not function without it. You need a OneShopLab account and a site key created there (site settings › Integrations). Until a site key is saved, the plugin makes no outbound request at all.

All traffic goes to https://oneshoplab.com over HTTPS, authenticated with your site key (Authorization: Bearer) and an HMAC-SHA256 request signature.

What is sent to OneShopLab, and when

• Product data, on every product save (batched and sent by a scheduled task about once a minute), on a manual “Sync everything now”, and page by page during the first sync after you save your key: product id, permalink, slug, title, description HTML, tag names, category name, brand/vendor name, SKU, prices and currency, stock availability, variation ids/titles/SKUs/prices/attributes, and for each image its WordPress attachment id, its URL, its alt text and its dimensions. Image files themselves are not uploaded — only the URLs, which OneShopLab fetches.
• Your site key, on every request, as the credential that identifies your shop.
• Your site URL, in the User-Agent header of each request, and once as the address of the webhook endpoint when the plugin registers for instant updates.
• Diagnostics flags, alongside each product sync: two booleans saying whether your media folder is writable and whether WordPress scheduled tasks are running, so OneShopLab can warn you before you approve a change your shop could not apply.
• A confirmation after each approved change is processed, saying whether it was applied, skipped, failed or conflicted, with a short reason.

When the plugin talks to OneShopLab

• On product save, trash, untrash, delete and stock change (queued, then sent by the 1-minute scheduled task).
• On “Sync everything now”, “Test connection”, “Check for changes now” and “Test” (instant updates), when you click them.
• Every 5 minutes, to poll for approved changes — the fallback path, which also runs immediately when an inbound webhook arrives.
• On inbound webhooks: OneShopLab posts a signed notification to /wp-json/oneshoplab/v1/webhook on your site, which only schedules the poll above. The notification is verified with a per-site HMAC secret and is never applied directly.
• Once a day, to re-register the webhook endpoint so it heals itself.
• Every 15 minutes at most, a short GET https://oneshoplab.com/api/health with no credentials, used by the Diagnostics list to check that your server can make outgoing connections.

What comes back from OneShopLab

Only the changes you approved: for one product, a new title, a new description, a new tag list, or a set of image operations. Approved image changes carry image URLs on OneShopLab’s storage, which the plugin downloads into your media library. Also: your OneShopLab site name, plan and limits, and your key’s permissions and expiry, shown on the plugin’s status card.

Customer and order data never leaves your site. The plugin does not read orders, customers, users, carts, checkout or payment data at any point, and the OneShopLab API it talks to has no endpoint for them.

Using this plugin means sending the data above to OneShopLab. Please read the service’s terms and privacy policy:

• Terms of Service: https://oneshoplab.com/en/terms
• Privacy Policy: https://oneshoplab.com/en/privacy

OneShopLab processes product data with third-party AI providers to generate the proposed copy and images; the sub-processors are listed in the privacy policy above.