Diviniket WP Forms
Legal & Compliance

Privacy Policy

Effective Date: October 2026 • Transparency in data collection and zero third-party tracking.

1. Overview

Diviniket WP Forms is a free and open-source WordPress plugin created by Aditya Singh, distributed via WordPress.org under the GPLv2 license. This Privacy Policy details our commitment to privacy and explains how data is handled when you use the Diviniket WP Forms plugin and visit our website at forms.diviniket.in.

2. Zero Intermediary Data Collection

Unlike traditional SaaS form builders, Diviniket WP Forms operates with zero intermediary tracking:

  • Local Database Ownership: Form entries and user submissions are stored directly within your own self-hosted WordPress database. We do not operate external relay servers and do not intercept, view, or resell form submission data.
  • Direct Google Sheets Sync: When you configure the Google Sheets integration, form payloads are transmitted directly from your WordPress server to your private Google Apps Script webhook URL. No third-party middleware (such as Zapier or Make) touches your credentials or user records.
  • No Analytics Tracking in Plugin: The core plugin does not inject telemetry scripts, trackers, or background tracking pixels into your WordPress frontend or admin dashboard.

3. Third-Party Integrations

When enabled by the site administrator, certain optional services may process technical data:

  • Anti-Spam Verification: If you enable Google reCAPTCHA or Cloudflare Turnstile, browser client details and IP signatures are evaluated directly by Google or Cloudflare in accordance with their respective privacy policies to prevent automated bot submissions.
  • Email Delivery: Form notification emails are sent using your WordPress server's default mail agent or your configured SMTP provider (such as WP Mail SMTP, Post SMTP, or Brevo).

4. File Upload Security

When visitors submit files through form attachment fields, files are saved directly into your WordPress media library or designated uploads directory on your server. Site administrators have full authority to restrict allowed file extensions (such as PDF, PNG, JPG) and enforce maximum file size limits to maintain server security.

5. GDPR and Data Rights Compliance

Because all submission records reside exclusively in your WordPress database and personal Google Sheet, you retain full sovereignty over user data. Site owners can view, filter, export, and permanently delete submissions at any time to satisfy Right to Access, Right to Rectification, and Right to Erasure requests under GDPR and CCPA regulations.

6. Contact and Inquiries

If you have any questions regarding privacy practices, security, or data handling in Diviniket WP Forms, please contact us via our Contact Page or connect with Aditya Singh on LinkedIn.