Mail Doctor

Mail Doctor replaces WordPress’ default wp_mail stack with authenticated SMTP or provider APIs plus the operational tooling fast-moving stores need. It is written for merchants, agencies, and reliability teams that want hard proof their receipts, fulfillment notices, and alerts land every time.

Feature Highlights

• Deliverability with guardrails – Route WooCommerce or all site email through your preferred SMTP/API provider, lock the From identity, and fail over gracefully when third-party endpoints go dark.

• One-click diagnostics – Send live tests with TLS/auth badges, latency metrics, DNS posture (SPF/DKIM/DMARC), and actionable warnings the moment something drifts.

• Reliable retries & queue control – Automatic exponential backoff, manual retry orchestration, Action Scheduler integration, and a “run queue now” control for urgent flushes.

• Deep visibility – Searchable logs with.eml downloads, header/body inspection, filterable status views, and CSV exports for audits.

• Email template workflow – Version history, diff previews, modal device switcher, and send-test flows for the WooCommerce template editor.

• Automation surface – REST API endpoints and WP-CLI commands mirror UI actions so you can script smoke tests, tail logs, or trigger retries in CI/CD pipelines.

• Privacy-first options – Hash or redact recipients, tune retention windows, and honour GDPR requests through the bundled exporters/erasers.

• Operational alerts – Instant Slack/email failure alerts plus weekly digests summarising throughput, latency, retries, and queue health.

External Services

This plugin acts as a connector between your WordPress site and third-party email providers. When you configure an external service (SMTP or API), this plugin transmits email data to that provider for delivery.

Data Sent:

* Sender and Recipient names and email addresses.

* Email subject, body content (HTML/Text), and headers.

* Timestamps and potentially the originating IP address.

When Payload is Sent:

* Immediately whenever an email is triggered by WordPress, WooCommerce, or another plugin, if that specific provider is currently set as your active transport.

Purpose:

* To reliably deliver transactional emails to user inboxes using the provider’s infrastructure.

Supported Services & Legal Links:

-

Google / Gmail

• Terms of Service

• Privacy Policy

• Endpoints: accounts.google.com, oauth2.googleapis.com

-

Microsoft / Outlook / Office 365

• Terms of Use

• Privacy Statement

• Endpoints: login.microsoftonline.com, outlook.office365.com

-

Twilio SendGrid

• Links: terms of service, privacy policy

• Endpoints: api.sendgrid.com

-

Mailgun

• Links: terms of service, privacy policy

• Endpoints: api.mailgun.net, api.eu.mailgun.net (and other region equivalents)

• Domain validation: When you click “Verify Domain” in the plugin settings, the plugin queries https://api.mailgun.net/v3/domains/{your-domain} (or the EU equivalent) to check DNS records (SPF, DKIM, MX). Data sent: your Mailgun API key and the domain name. No email content is transmitted during this check.

-

Amazon SES

• Links: terms of service, privacy policy

• Endpoints: email.us-east-1.amazonaws.com, email-smtp.us-east-1.amazonaws.com (and other *.amazonaws.com region equivalents)

-

Postmark

• Links: terms of service, privacy policy

• Endpoints: api.postmarkapp.com

-

SparkPost

• Links: terms of service, privacy policy

• Endpoints: api.sparkpost.com

-

Brevo (formerly Sendinblue)

• Links: terms of service, privacy policy

• Endpoints: smtp-relay.brevo.com (SMTP relay); configurable SMTP host per your provider settings.

• This plugin transmits the same email data (sender, recipients, subject, body) to Brevo’s SMTP relay servers when Brevo is configured as the active transport.

OAuth Authentication Endpoints:

When you connect Google or Microsoft accounts using OAuth2, this plugin communicates with the following authentication endpoints to obtain and refresh access tokens:

-

Google OAuth2

• Authorization: https://accounts.google.com/o/oauth2/v2/auth

• Token exchange: https://oauth2.googleapis.com/token

• Data sent: Client ID, authorization code, and redirect URI

• Google API Terms of Service

• Google Privacy Policy

-

Microsoft OAuth2 (Outlook/Office 365)

• Authorization: https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize

• Token exchange: https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token

• Data sent: Client ID, client secret, authorization code, and redirect URI

• Microsoft API Terms of Use

• Microsoft Privacy Statement

Quick Start

• Review the documentation link in the Documentation section for the full tour and terminology.

• Configure SMTP/API credentials on WooCommerce → Mail Doctor → Settings.

• Send a test email from the Status tab and verify DNS/auth posture.

• Visit Logs to confirm entries are stored and retries are scheduled as expected.

• Enable alerts and weekly digests so the team knows when to act.

Documentation

com/docs/mail-doctor/welcome-to-mail-doctor – guides, setup, troubleshooting, and support.

Privacy controls

Mail Doctor ships with built-in privacy tooling under Settings → Logging & Privacy:

• Mask recipient emails: Hashes addresses before storing them in logs.

• Redact headers and bodies: Keeps metadata only so sensitive content is not persisted.

• Retention windows: Separate sliders for sent, failed, and payload data; shorten for stricter compliance.

• GDPR exporter/eraser: WordPress privacy tools are wired to export or anonymise recipient rows on request.

• Role-based access: Admin UI and AJAX endpoints are gated by manage_woocommerce / manage_options.

Troubleshooting

• Red notices on the Status tab usually indicate DNS or authentication drift—re-run the onboarding checks and confirm credentials with your provider.

• If the queue stalls, visit Settings → Retry & Queue and use Run queue now; check your cron runner or Action Scheduler if jobs remain pending.

• Use the.eml download from each log entry when escalating to your SMTP provider—they can analyse the exact payload and SMTP transcript.

• For privacy incidents, toggle Privacy Mode and shorten retention while you investigate; the GDPR exporter/eraser handles customer requests.

Support & Packaging

• Requirements: WordPress 6.0+, WooCommerce (latest), PHP 8.1–8.3 with cURL/JSON; OpenSSL recommended for encrypted secret storage.

• Included in download: mail-doctor/ plugin folder, Documentation/ offline HTML docs, readme.txt, changelog.txt, and LICENSE.

• Support/Contact: See the Documentation section for guides and support links. When requesting help, include your WP/Woo versions, provider, and a recent log ID from Mail Doctor → Logs.