Wonyx Form Builder

Google reCAPTCHA

Used only when reCAPTCHA is enabled for spam protection. The visitor’s CAPTCHA token and IP address may be sent to Google for verification. Service: https://www.google.com/recaptcha/about/ Terms: https://policies.google.com/terms Privacy: https://policies.google.com/privacy

hCaptcha

Used only when hCaptcha is enabled for spam protection. The visitor interacts with hCaptcha and verification data may be sent to Intuition Machines. Service: https://www.hcaptcha.com/ Terms: https://www.hcaptcha.com/terms Privacy: https://www.hcaptcha.com/privacy

Cloudflare Turnstile

Used only when Turnstile is enabled for spam protection. Verification data may be sent to Cloudflare. Service: https://www.cloudflare.com/products/turnstile/ Terms: https://www.cloudflare.com/website-terms/ Privacy: https://www.cloudflare.com/turnstile-privacy-policy/

Google Maps Platform / Places

Used only when Google Places address autocomplete is enabled. Address queries and related browser data are handled by Google Maps Platform. Service: https://developers.google.com/maps Terms: https://cloud.google.com/maps-platform/terms Privacy: https://policies.google.com/privacy

Google Sheets / Apps Script

Used only when the administrator supplies an Apps Script Web App URL and enables the integration. Configured submission fields are sent to that administrator-controlled endpoint. Service: https://developers.google.com/apps-script Terms: https://policies.google.com/terms Privacy: https://policies.google.com/privacy

Mailchimp

Used only when enabled with an API key and audience. The configured contact email is sent to Mailchimp. Service: https://mailchimp.com/ Terms and privacy information: https://mailchimp.com/legal/

GetResponse

Used only when enabled with an API key and campaign. The configured contact email is sent to GetResponse. Service: https://www.getresponse.com/ Terms and privacy information: https://www.getresponse.com/legal

Campaign Monitor

Used only when enabled with an API key and list. The configured contact email is sent to Campaign Monitor. The plugin does not assert tracking consent on behalf of the visitor. Service: https://www.campaignmonitor.com/ Terms and privacy information: https://www.campaignmonitor.com/policies/

Webhooks and automation endpoints

Generic form webhooks, Google Apps Script endpoints, and Zapier/Make/Pabbly-style automation webhooks are contacted only when an administrator enters an endpoint URL and enables the feature. The configured form submission payload is sent to that administrator-selected endpoint. Terms and privacy policies depend on the endpoint/service selected by the site owner.

SMTP servers

If Custom SMTP is selected, email content and recipient/sender metadata are transmitted to the SMTP server configured by the site administrator. Terms and privacy policies depend on that SMTP provider.

Privacy

The plugin stores form submissions in the WordPress database. Depending on form configuration, entries may contain names, email addresses, phone numbers, addresses, uploaded files, signatures, referral data, campaign parameters and an IP address.

IP collection, partial/abandoned entry capture and campaign tracking are optional. New forms have campaign tracking disabled by default. WordPress privacy export and erase requests can export or anonymize stored entries associated with a requested email address. Local files stored by upload/signature fields in matching entries are also removed when possible.

Wonyx Form Builder itself does not send usage telemetry to Wonyx IT Solutions.