Streamline Connect

Description

Streamline Connect is a WordPress plugin that allows you to seamlessly integrate your Voiceflow AI assistants into your WordPress website. The plugin provides a simple interface to manage your assistants and their configurations.

Features

• Connect multiple Voiceflow AI assistants
• Manage assistant configurations
• License management system
• Easy-to-use admin interface

Security Features

StreamlineConnect implements comprehensive security measures to protect your WordPress site:

Nonce Protection:
* All AJAX requests require valid WordPress nonces for verification
* Process page access requires assistant-specific nonces for enhanced security
* Fresh nonce generation system prevents replay attacks
* Different nonce actions for different functionality (payments, licenses, admin operations)

Permission Validation:
* All administrative functions require ‘manage_options’ capability
* User authentication required for payment processing
* Database operations are restricted to authorized users only
* Rate limiting on data processing endpoints (10 requests per minute per user)

Input Sanitization:
* All user inputs are sanitized using WordPress standards
* Recursive sanitization for complex data structures
* SQL injection prevention through prepared statements
* XSS protection on all output

Performance Security:
* Security checks only run when necessary to prevent performance degradation
* Early exit strategies for non-plugin pages
* Conditional nonce validation based on operation type
* Transient caching for rate limiting

Data Protection:
* All database queries use WordPress prepared statements
* Sensitive operations require multiple validation layers
* Assistant IDs validated against database before operations
* Domain validation for local development detection

External Services

This plugin connects to external third-party services to provide AI assistant functionality, subscription management, and payment processing. Below is a comprehensive disclosure of all external services used:

1. Streamline Services API (wp-api.streamline.services)
– Purpose: Core subscription management, license validation, billing processing, and AI assistant interaction routing
– What data is sent:
– Domain name and website URL
– User information (first name, last name, email address)
– Billing address information (street address, city, state, postal code, country)
– Payment information (processed securely, not stored by plugin)
– License keys and subscription status
– AI assistant configuration data and interaction logs
– When data is sent:
– During subscription creation and management
– License activation and periodic validation checks
– Every AI assistant interaction and conversation
– Billing status verification (automatic background checks)
– Service Provider: Streamline Services
– Privacy Policy: https://streamline.services/privacy
– Terms of Service: https://streamline.services/terms

Specific API Endpoints:
– https://wp-api.streamline.services/api/subscriptions – Create and manage subscription plans
– https://wp-api.streamline.services/api/subscriptions/by-domain – Check subscription status by domain
– https://wp-api.streamline.services/api/voiceflow/trigger – Process AI assistant interactions

2. Voiceflow API (voiceflow.com)
– Purpose: AI conversation processing and chatbot response generation (accessed through Streamline Services proxy)
– What data is sent:
– User messages and conversation history
– Assistant API keys and configuration
– Session data and conversation context
– When data is sent: Every time a user interacts with an AI assistant
– Service Provider: Voiceflow Inc.
– Privacy Policy: https://www.voiceflow.com/privacy
– Terms of Service: https://www.voiceflow.com/terms

Data Processing Notes:
– All data transmission occurs over secure HTTPS connections
– User interaction data is processed to provide AI responses and improve service quality
– Billing information is handled securely and not permanently stored by the plugin
– License validation occurs automatically to ensure service compliance
– No sensitive WordPress database information is transmitted to external services