TextTango

TextTango connects your WordPress or WooCommerce site to your TextTango account and sends SMS for the moments
that matter.

Sign in by phone

• Passwordless login with a one-time code, as a shortcode or on the WordPress login screen.
• Optional two-factor authentication, per role.
• Optionally require a customer to verify the phone number they check out with, on both classic and block
  checkout, before an order can be placed. Off by default.
• Codes are hashed, single-use, rate limited per number and per address, and never written to the log in full.

WooCommerce order notifications

• Seven events — payment received, completed, on hold, cancelled, refunded, payment failed, and a staff alert
  on a new order — each switched on separately with its own wording.
• A live character and segment count while you write, so you can see before sending whether a message costs one
  SMS or two.
• Works with High-Performance Order Storage and block checkout.

Consent, kept properly

• An unticked consent box at checkout and in the customer’s account, recorded with a timestamp and a source.
• Optional double opt-in: agreeing sends one message to the number, and only an answer from that handset turns
  it into permission.
• Order updates are treated as service messages and keep sending; marketing needs consent.
• A number the platform refuses is added to an opt-out list, and nothing is sent to it again.

Marketing that respects the opt-out list

• Send one message to everyone who agreed, with a review step showing recipients, cost and who was excluded —
  and why — before anything is spent.
• The audience is built from your own consent records, so somebody who opted out an hour ago is left out.
• Basket reminders for signed-in customers who left without buying, cancelled the moment they order.
• Coupon campaigns that check the code is live and warn you if there is not enough of it to go round.
• Choose a campaign’s audience: your consenting customers, numbers you supply, or both. Supplied numbers are
  still filtered through your opt-out list, and using them is recorded against your name.

Delivery receipts you can prove

• A signed webhook endpoint, registered with TextTango from the settings screen.
• A test event you can fire and watch arrive, so the loop is proven rather than assumed.
• A self-healing poller for receipts that never turn up.

Spending you can bound

• Daily, monthly and per-number caps, with a per-number cap that catches a loop aimed at one customer.
• Marketing pauses first when the balance runs low. Sign-in codes are never held back by any limit.
• A circuit breaker that stops waiting on an API that is not answering.

Built to be built on

• A public PHP API: texttango_send_sms(), texttango_is_connected(), texttango_get_balance(),
  texttango_normalize_phone().
• Documented actions and filters, and six WP-CLI commands.
• An audit trail of who changed what — never of what a credential was.

Safe by default

• Sandbox mode turns itself on outside production, so a staging clone never texts a real customer.
• Every notification is off until you switch it on, so connecting the plugin texts nobody by itself.
• Credentials are encrypted at rest and never reach JavaScript or any REST route.

The plugin is a thin client of the TextTango v2 API. You need a TextTango account and an API token, created in
the TextTango dashboard under Profile → API Tokens.

External services

This plugin is a thin client of the TextTango SMS API (https://app.texttango.com/docs/api/v2), operated by
TextTango (rCodez). Every SMS the plugin sends — a sign-in code, a checkout verification code, a WooCommerce
order notification, a form-submission alert, or a marketing campaign message — is delivered through this API, so
it is required for the plugin’s core functionality.

What is sent, and when: the recipient’s phone number and the text of the message, sent at the moment each of
those events fires (for example, the instant a customer requests a sign-in code, or the instant an order changes
status and a notification is due). No other personal data is sent. TextTango sends delivery status back to the
site over a webhook the site owner registers from the Setup screen, so the plugin can show whether a message
was delivered.

This service is provided by TextTango: Terms of Service (https://texttango.com/terms), Privacy Policy
(https://texttango.com/privacy).