AV Solutions Courier Shipping for WooCommerce

The bundled audit XSD is an independently authored validation subset for the XML generated by the plugin. It follows the publicly described Appendix 38 field structure, but it is not an official National Revenue Agency schema and its acceptance in the current reporting period has not been independently confirmed. Compare every export with the current official schema before submission.

External services

This plugin connects only to courier services explicitly enabled and configured by a store administrator. Enabling a courier and entering credentials authorizes the related API communication. No analytics or advertising services are used.

To synchronize delivery locations, obtain prices, create or cancel shipments, print labels and track shipments, the plugin may send the following data to the selected courier: sender account credentials and contact details; recipient name, telephone, email and delivery address or selected office; order reference, package weight and dimensions; shipment content description; order currency and value; cash-on-delivery amount and options. Each courier processes this data under the merchant’s contract and its own terms and privacy policy.

Econt

API requests are sent to demo.econt.com in the Econt test environment and ee.econt.com in production.

• API documentation: https://www.econt.com/developers/soap-json-api.html
• Privacy policy: https://static-content.econt.com/cms/pages/documents/privacy_policy/Politika_za_lichnite_danni_en.pdf
• General terms and customer information: https://www.econt.com/en/client-center

Speedy

API requests are sent to api.speedy.bg . Speedy uses the same API host with different test or production credentials.

• API documentation: https://api.speedy.bg/api/docs/
• Privacy policy: https://www.speedy.bg/en/gdpr
• General terms: https://www.speedy.bg/en/terms-and-conditions

BOX NOW

API requests are sent to the HTTPS BOX NOW hostname configured by the administrator. The plugin accepts only boxnow.bg and its subdomains.

• API documentation: https://www.boxnow.bg/diy/eshops/api
• Privacy policy: https://boxnow.bg/en/personal-data-processing-notice
• Website terms and customer information: https://boxnow.bg/en/

Pigeon Express

API requests are sent to the HTTPS Pigeon Express hostname configured by the administrator. The plugin accepts only pigeonexpress.com and its subdomains.

• API documentation: https://api-docs.pigeonexpress.com/
• Privacy policy: https://pigeonexpress.com/privacy
• Service terms: https://pigeonexpress.com/terms

Privacy

The plugin stores courier credentials in the WordPress options table in encrypted form, using keys derived from the site’s WordPress salts. Credentials can alternatively be supplied as constants. Changing the WordPress salts requires the credentials to be entered again.

Order delivery details, courier shipment identifiers, document snapshots, refund information and an action log are stored in the WordPress database. Generated customer document links are signed and expire after seven days. Anyone who obtains a valid link can open the document during that period, so links should not be published.

The plugin does not collect telemetry and does not send data to the plugin author. Data is sent to a courier only after that courier is enabled and configured, as described under External services . Store owners are responsible for adding the selected couriers and applicable retention information to their own privacy notice and for handling data-subject requests under applicable law.