StaffFlow AI

StaffFlow AI lets a WordPress administrator connect one selected StaffFlow AI employee to one exact HTTPS WordPress website. After the administrator approves a short-lived, single-use connection in StaffFlow, this plugin loads the StaffFlow Widget automatically on the public website.

No WordPress password, StaffFlow password, StaffFlow access token, or StaffFlow API key is shared between the services or stored by this plugin.

What this plugin does

• Adds one administrator-only StaffFlow AI settings page.
• Opens the secure StaffFlow connection page from WordPress Admin.
• Uses a short-lived, single-use approval bound to the exact HTTPS website origin.
• Stores only non-secret connection metadata locally: a connection ID, selected AI ID, selected AI name, and local connection time.
• Loads the StaffFlow Widget only after an administrator connects it.
• Lets an administrator remove the local Widget configuration at any time.

StaffFlow service

This plugin connects to the StaffFlow AI SaaS service at https://www.staffflowai.com. A StaffFlow account and at least one configured AI employee are required to use the service. StaffFlow may offer paid plans; the full WordPress plugin source remains available under the GPL regardless of the selected StaffFlow plan.

StaffFlow terms and privacy information:

• https://www.staffflowai.com/#/terms
• https://www.staffflowai.com/#/privacy

External service and privacy

The plugin does not contact StaffFlow until a WordPress administrator chooses Connect StaffFlow AI and returns with a one-time approval. After a successful connection, the plugin loads https://www.staffflowai.com/widget.js on public pages so visitors can use the selected AI employee.

The plugin itself does not collect visitor chat messages, visitor contact details, passwords, access tokens, or analytics. The local WordPress database retains only the non-secret connection metadata described above. Visitor interactions with the Widget are processed by StaffFlow AI to provide the requested AI service. Site administrators should review the suggested StaffFlow text in WordPress’s privacy-policy editor and publish an appropriate privacy notice for their visitors.

Removing the local connection or uninstalling the plugin deletes the locally stored connection metadata. A website connection can also be revoked from the relevant StaffFlow workspace.