=== FreeTalk Messenger Lite ===
Tags: live chat, chatbot, messaging, voice chat, customer support
Requires at least: 6.2
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 0.16.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Chat, private visitor support, optional OpenAI chatbot replies and one-to-one browser voice calls for WordPress.

== Description ==
FreeTalk Messenger Lite provides member messaging, guest invitations, private visitor support, reactions, replies, mentions, room announcements, sound preferences and shortcuts.

AI chatbot replies and the floating support widget are optional. They require an administrator's own OpenAI API key. API usage fees are separate from ChatGPT subscriptions. Human support and ordinary chat do not require an API subscription.

Attachments are saved privately on the WordPress host, up to 20 MiB per file or the lower server upload limit. The private storage directory must be outside the web document root; configure FTM_PRIVATE_STORAGE_DIR if your host cannot create the default directory.

One-to-one voice calls require HTTPS, a supported browser and microphone permission. Closed browsers cannot receive calls. Mobile background behavior and browser audio restrictions apply.

Pro is a separately distributed product. It adds custom branding, automatic message translation, Google Drive storage and end-to-end encryption. These implementations are not included in Lite.

== Installation ==
1. Upload the plugin folder to wp-content/plugins or upload the Lite ZIP in Plugins > Add Plugin.
2. Activate FreeTalk Messenger Lite. The plugin creates a Messenger page with [freetalk_messenger].
3. Configure the default language and guest access in the plugin settings.
4. Create a room and share its invitation link. Guest users can access invited guest-enabled rooms only.
5. To enable AI replies, create a private visitor support room, configure its link and response instructions, enter your OpenAI API key and explicitly enable AI replies.
6. For voice calls, use HTTPS and allow microphone access when initiating or accepting a call.

== External services ==
= OpenAI API (optional AI chatbot) =
After an administrator provides an API key, reference instructions and a support-room link and enables AI replies, visitor text and recent conversation context are sent to https://api.openai.com/v1/responses to generate replies. The plugin sets store=false in its API request; OpenAI's own retention policies still apply. Images and attachment contents are not submitted by this chatbot implementation. The administrator is responsible for informing visitors before enabling the service. Ordinary chat works without OpenAI.
Service information and policies: https://openai.com/policies/

= STUN/TURN (voice calls) =
On an explicit voice-call attempt, the browser may connect to the default Google STUN endpoint stun:stun.l.google.com:19302 to discover network routes. IP addresses and connection metadata are necessarily used. Calls may connect directly to the other participant; a configured TURN server relays traffic. Operators can configure their own ICE servers in Voice call settings and should provide the relevant service policies to users.
Google privacy policy: https://policies.google.com/privacy

= WordPress avatars =
Where WordPress returns an external avatar URL, the browser may request that image from the configured avatar provider, including Gravatar. Operators can disable external avatars through WordPress/avatar-provider settings.
Gravatar privacy information: https://automattic.com/privacy/

== Privacy and data ==
The site stores messages, participant identities, room membership, reactions, uploaded files and profile photos. Guest tokens expire after seven days. Connection IPs/network prefixes are recorded for room moderation and session management. Optional attendance records store clock times and connection IPs visible to administrators. Call signaling is private to participants and kept for up to 24 hours by application cleanup logic. Application cleanup depends on execution; records are not guaranteed to be purged at an exact wall-clock time.

The plugin uses a guest-session cookie and browser storage for language, preferences and shortcuts. Lite does not provide end-to-end encryption. Deactivation preserves records; operators should define a retention/deletion policy and include this information in their site's privacy policy. A full user-data export/erasure integration is not yet included.

== Frequently Asked Questions ==
= Is the AI chatbot free? =
The plugin functionality is free. OpenAI API usage requires your own key and is billed separately.

= Does Lite include voice calls? =
Yes. One-to-one voice calls are included, including eligible invited guests.

= Is automatic message translation included? =
No. That is part of the separately distributed Pro product. Lite's chatbot can reply in the configured user language.

== Changelog ==
= 0.16.0 =
Initial release. Free AI chatbot, four default characters, private visitor support, voice calls, private attachments up to 20 MiB, and English/Korean/Simplified Chinese administrator screens. Prepared SQL identifiers, contextual administrator output filtering and WordPress private-file storage integration. Requires WordPress 6.2 or later.

