Waffo and Anyway subscriptions

Dashloom Cloud uses provider-hosted checkout. Card data never passes through Dashloom. The browser return URL never grants access; only a verified, idempotently recorded webhook can change workspace entitlements.

Server-owned catalog

The server catalog is Solo USD 9/month, Studio USD 29/month, and Agency USD 79/month. Product IDs and payment links are deployment configuration, not browser input. If prices change, update the public pricing copy, server catalog, and both provider products together.

Waffo configuration: WAFFO_MODE, WAFFO_MERCHANT_ID, WAFFO_PRIVATE_KEY_BASE64, and WAFFO_PRODUCT_SOLO/STUDIO/AGENCY. Its signed webhook endpoint is /api/billing/webhook/waffo.

Anyway configuration: ANYWAY_PAYMENT_LINK_SOLO/STUDIO/AGENCY and matching ANYWAY_PRODUCT_SOLO/STUDIO/AGENCY. Its Standard Webhooks endpoint is /api/billing/webhook/anyway.

Waffo checkout carries a server-created checkout ID in order metadata. Anyway receives only that opaque ID as merchant_reference; do not put secrets or personal data in payment-link query parameters. Webhooks validate the provider, product, amount, currency, event identity, and ordering before updating a subscription.

Operations

Keep Waffo test/prod resources separate and use Anyway test-capable links where available. Configure both webhook endpoints only after the public Worker origin is final. Test success, failure, renewal, cancellation, duplicate delivery, invalid signature, delayed/out-of-order delivery, and webhook-before-return behavior.

Cancellation and refund forms create operator-review requests; they do not automatically mutate provider state. Use the provider dashboard for invoices, refunds, disputes, and account-level reconciliation. Do not enable real transactions until legal terms, tax handling, refund policy, support contact, and provider onboarding are complete.