NettoProfit

NettoProfit is a WooCommerce profit intelligence plugin that shows the real bottom-line behind every sale.

FREE Features

Pixel Health Checker (FREE — no account needed)

Know immediately whether your Meta Pixel, Google Tag, TikTok Pixel, Pinterest Tag and Snapchat Pixel are firing correctly on every key WooCommerce page.

• Per-page event coverage matrix (Homepage, Shop, Product, Cart, Checkout)

• 0–100 health score with A–F grade

• Meta Event Match Quality (EMQ) field analysis — see exactly which fields are missing and how much they hurt attribution

• Google Consent Mode v2 compliance check (critical for EU/EEA traffic)

• Weekly automated scan with low-score email alerts

• One-click “Copy Report” to clipboard

PRO Features

• Real net profit per order — after COGS, shipping, payment fees, ad spend and custom expenses

• Campaign → Ad Set → Ad hierarchy with 6-period comparison

• Google Ads (including Performance Max), Meta Ads (including Advantage+), TikTok Ads (including Smart+) sync

• Product break-even analysis: break-even price, ad cost headroom, break-even CPA

• P&L waterfall report

• Multi-period ROAS, POAS, and CPA trending

• CSV export

• Profit-threshold alerts with email + admin notice delivery

PRO+AI Features

• Claude Sonnet AI Advisor — natural language profit questions answered instantly

• AI anomaly explainer — why did revenue drop? (with 3 actionable steps)

• AI ad copy generator — 3 variants per brief, one click to copy

• AI narrative report — weekly plain-English P&L summary

• Monthly token budget tracker with dev-mode cap

Technical Notes

• Requires WooCommerce High-Performance Order Storage (HPOS) — enabled by default in WC 8.2+

• WooCommerce Cart and Checkout Blocks compatible

• PSR-4 autoloaded PHP 8.3 codebase — no global function soup

• All DB queries use $wpdb->prepare() — OWASP SQL injection prevention

• AES-256-CBC encryption for all stored API keys

• No external CDN dependencies on the critical path

External Services

This plugin connects to several third-party services for the optional PRO and PRO+AI features. The free Pixel Health Checker does not send any data outside your own server.

NettoProfit License & AI Proxy

Used by the PRO and PRO+AI tiers to validate license keys and to relay AI requests to Anthropic’s Claude API on the user’s behalf.

• Service provider: NettoProfit. Terms of service: https://nettoprofit.com/terms/ — Privacy policy: https://nettoprofit.com/privacy-policy/.

• What is sent: license key (during validation), aggregated profit/loss numbers and the user’s natural-language question (during AI Advisor calls). No customer personally identifiable information (PII) is sent.

• When it is sent: license validation runs once on key entry and at most once every 12 hours; AI calls run only when the site administrator clicks an AI feature.

• Endpoints: two private POST-only endpoints on the NettoProfit API host — one for license validation and one for the AI proxy. Both require a valid license key in the request body and respond 401 to unauthenticated requests; they are not browseable URLs.

Anthropic Claude API (proxied)

The PRO+AI tier sends aggregated P&L data and the administrator’s prompt to Anthropic’s Claude API through the NettoProfit proxy described above. No direct connection to Anthropic is made from the user’s WordPress site.

• Service provider: Anthropic PBC. Terms of service: https://www.anthropic.com/legal/consumer-terms — Privacy policy: https://www.anthropic.com/legal/privacy.

• What is sent: aggregated metrics (revenue, COGS, ad spend, profit) and the prompt text — no order numbers, customer names, emails, or addresses.

• When it is sent: only when an administrator triggers an AI Advisor, Anomaly Explainer, Ad Copy Generator, or Report Narrator action.

Google Ads API

Used by the PRO tier (only when the administrator enters Google Ads API credentials) to import campaign, ad group, and ad spend data.

• Service provider: Google LLC. Terms of service: https://cloud.google.com/terms/ — Privacy policy: https://policies.google.com/privacy.

• What is sent: the credentials configured by the administrator (developer token, OAuth refresh token, customer ID) and standard Google Ads API queries.

• When it is sent: on a scheduled hourly sync and on manual “Sync now” clicks.

Meta Marketing API

Used by the PRO tier (only when the administrator enters Meta Ads credentials) to import ad spend.

• Service provider: Meta Platforms, Inc. Terms of service: https://www.facebook.com/legal/terms — Privacy policy: https://www.facebook.com/privacy/policy/.

• What is sent: the credentials configured by the administrator (App ID, App Secret, access token, ad account ID) and standard Meta Marketing API queries.

• When it is sent: on a scheduled hourly sync and on manual “Sync now” clicks.

TikTok Marketing API

Used by the PRO tier (only when the administrator enters TikTok Ads credentials) to import ad spend.

• Service provider: TikTok Pte. Ltd. Terms of service: https://ads.tiktok.com/i18n/official/policy/terms — Privacy policy: https://ads.tiktok.com/i18n/official/policy/privacy.

• What is sent: the credentials configured by the administrator (App ID, App Secret, access token) and standard TikTok Marketing API queries.

• When it is sent: on a scheduled hourly sync and on manual “Sync now” clicks.

Source Code

1 (MIT license). 1 npm package. All other JavaScript and CSS in this plugin ships unminified.