Changes to your store only with your approval
WooMate shows you every change before it's saved, keeps a history of operations and lets you undo supported changes. We encrypt keys and tokens, and store data on servers in Germany.
How change approval works
The same mechanism covers the chat, publishing from Studio, orders in Monitor and ad campaigns.
Preview before saving
For every operation you see the current and proposed values. You approve the save with a button or reject it.
Approval expires
An approval is valid for 30 minutes, or 15 minutes for ads. Before saving, WooMate checks that your store data hasn't changed since the preview.
History and undo
Every operation goes into a log with its before and after state. Reversible product changes can be restored with one click. Order status and campaign settings can't be undone automatically.
No guessing when something fails
When the result of a save is uncertain, the operation gets a needs-checking status. WooMate doesn't retry it automatically.
Your store data
WooMate doesn't keep a copy of your product catalog or order database. It reads data live from WooCommerce and your connected services.
We store what the work and its history require: values before and after approved operations, content versions, import results, costs and settings.
We mask your store's customer data in the app and in notifications. The exception is exporting segments to CSV, which includes email addresses, because that's what it's for.
Access to your store and to AI
When you connect WooCommerce, you choose the scope: read-only, or read and write. You can revoke access at any time by deleting the WooMate key in WooCommerce (WooCommerce → Settings → Advanced → REST API).
AI features run on your own key. The data a task needs goes to the provider you chose: Anthropic, OpenAI or Google, under the terms of its API. You set a monthly AI cost limit in the app.
On the Agency plan, clients approve proposed changes to their products before you publish them.
Security questions
Can WooMate change anything in my store without my approval?
No. Saving to WooCommerce, WordPress, Merchant Center and ad campaigns requires your approval. You start an import yourself, after reviewing the summary.
Do I have to give WooMate write access?
No. Read access is enough to browse data in Monitor and ask questions in the chat. Write access is needed for product changes and import.
What about my customers' data?
The chat reads orders, but customer contact details (email, phone, address, last name beyond the initial) stay hidden from the AI until you turn them on in store settings. Monitor shows customers with personal data masked. Our privacy policy describes how data is processed.
How do I report a security issue?
Email hello@getwoomate.com with the subject “Security”.
Try WooMate on your store. Start with read-only access
Connect your store with read access, review the results in Monitor and decide whether you want to assign changes. We'll help you set it up for free.
Help by email, step by step. We reply to every request within 24 hours.