AFI AFI
Legal Information

Terms & Policies

Please read our terms of service, privacy policy, and other legal information carefully.
Last updated: January 3, 2025

Terms of Service

These Terms of Service govern your use of Advanced Form Integration plugin and services.

1. Acceptance of Terms

By accessing or using Advanced Form Integration ("AFI", "the Plugin", "our Service"), you agree to be bound by these Terms of Service. If you do not agree to these terms, please do not use our Service.

2. Description of Service

AFI is a WordPress plugin that enables users to connect form submissions to various third-party services and applications. Our Service includes:

  • Integration with 500+ third-party platforms
  • Field mapping and data transformation
  • Conditional logic and automation
  • Logging and error tracking
  • Customer support and documentation

3. Account Registration and License

To use certain features of AFI, you may need to purchase a license. When you purchase a license:

  • You must provide accurate and complete information
  • You are responsible for maintaining the security of your license key
  • You must not share your license key with unauthorized parties
  • Each license is valid for the number of sites specified in your plan
  • Licenses are non-transferable without our written consent

4. Acceptable Use

You agree not to use AFI to:

  • Violate any applicable laws or regulations
  • Infringe upon the intellectual property rights of others
  • Transmit spam, malware, or other harmful code
  • Interfere with or disrupt the Service or servers
  • Attempt to gain unauthorized access to any systems or networks
  • Use the Service for any illegal or unauthorized purpose

5. Intellectual Property

All content, features, and functionality of AFI, including but not limited to software, text, graphics, logos, and trademarks, are owned by us or our licensors and are protected by international copyright, trademark, and other intellectual property laws.

6. Limitation of Liability

To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or other intangible losses resulting from your use of the Service.

7. Termination

We reserve the right to suspend or terminate your access to the Service at any time, with or without notice, for conduct that we believe violates these Terms or is harmful to other users, us, or third parties, or for any other reason at our sole discretion.

8. Changes to Terms

We reserve the right to modify these Terms at any time. We will notify users of any material changes via email or through the plugin interface. Your continued use of the Service after such modifications constitutes your acceptance of the updated Terms.

9. Contact Information

If you have any questions about these Terms, please contact us at:

Email: [email protected]

Privacy Policy

We are committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information.

1. Information We Collect

We collect the following types of information:

Account Information

  • Name and email address when you create an account or purchase a license
  • Billing information (processed securely by Freemius)
  • License key and activation details

Usage Information

  • Plugin version and WordPress version
  • Site URL (only if you opt-in to usage tracking)
  • Integration configurations and error logs (stored locally on your server)

Support Information

  • Communications with our support team
  • Feedback and feature requests

2. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve our Service
  • Process transactions and send transaction notifications
  • Respond to support requests and provide customer service
  • Send important updates about the plugin and services
  • Analyze usage patterns to improve functionality
  • Detect, prevent, and address technical issues

3. Data Storage and Processing

Important: AFI processes all form data locally on your WordPress installation. We do not store, access, or process your form submission data on our servers. The data is sent directly from your website to the third-party platforms you configure.

Account and license data is stored securely on servers located in the United States and European Union, using industry-standard encryption.

4. Third-Party Services

When you use AFI to integrate with third-party services:

  • Data is sent directly from your server to the third-party platform
  • Each third-party service has its own privacy policy
  • We are not responsible for how third-party services handle your data
  • You should review the privacy policies of services you integrate with

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. You may request deletion of your account data at any time by contacting support.

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to data processing
  • Export your data in a portable format
  • Withdraw consent at any time

7. Children's Privacy

Our Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.

8. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a notice in the plugin.

GDPR Compliance

Our commitment to EU General Data Protection Regulation compliance.

1. Data Controller

For the purposes of GDPR, Advanced Form Integration acts as a data processor for form submission data (which is processed on your server) and as a data controller for account and license information.

2. Legal Basis for Processing

We process personal data under the following legal bases:

  • Contract: To fulfill our obligations under your license agreement
  • Legitimate Interest: To improve our Service and provide support
  • Consent: For marketing communications (opt-in required)
  • Legal Obligation: To comply with applicable laws

3. Your GDPR Rights

Under GDPR, you have the following rights:

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to certain types of processing
  • Rights Related to Automated Decision-Making: Protection from automated decisions

4. Data Protection Measures

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit (SSL/TLS)
  • Encryption of data at rest
  • Regular security assessments
  • Access controls and authentication
  • Employee training on data protection

5. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR.

6. International Data Transfers

If we transfer data outside the EU, we ensure adequate safeguards through:

  • EU-approved Standard Contractual Clauses
  • Adequacy decisions
  • Appropriate security measures

7. Contact Our Data Protection Officer

For GDPR-related inquiries or to exercise your rights, contact us at:

Email: [email protected]

8. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data protection rights have been violated.

Security

How we protect your data and maintain the security of our plugin.

1. Plugin Security Measures

We implement security best practices in our plugin development:

Code Security

  • WordPress coding standards and security guidelines compliance
  • Input validation and sanitization on all user inputs
  • Output escaping to prevent XSS attacks
  • Nonce verification for all form submissions
  • SQL prepared statements to prevent injection attacks
  • Regular code reviews and security patches

Data Protection

  • API credentials stored encrypted in WordPress database
  • Secure OAuth 2.0 flows for platform authentication
  • HTTPS enforced for all external API communications
  • No sensitive data stored in plain text
  • Integration logs stored locally on your server only

Update & Maintenance

  • Regular plugin updates with security improvements
  • Quick response to reported security vulnerabilities
  • Compatibility testing with latest WordPress versions
  • Transparent changelog documenting all security fixes

2. Your Security Responsibilities

Plugin security is a shared responsibility. You should:

  • Keep WordPress, PHP, and the plugin updated to latest versions
  • Use strong administrator passwords and enable two-factor authentication
  • Limit WordPress admin access to trusted users only
  • Choose a reputable hosting provider with good security practices
  • Use SSL/TLS certificates (HTTPS) for your website
  • Regularly backup your WordPress database and files
  • Review integration permissions and API access carefully
  • Monitor integration logs for suspicious activity

3. How Data Flows

Important: AFI processes all form data locally on your WordPress server. When a form is submitted:

  • Data is captured by your form plugin (Elementor Forms, Gravity Forms, etc.)
  • AFI receives the data through WordPress hooks
  • Data is processed, mapped, and transformed on your server
  • Data is sent directly from your server to the third-party service via their API
  • We never route your form data through our servers

This architecture means your data security primarily depends on your hosting environment and the third-party services you integrate with.

4. Third-Party Service Security

When you integrate with third-party services:

  • Each service has its own security policies and practices
  • Data security in those services is governed by their terms
  • We recommend reviewing each service's security documentation
  • Choose services that meet your security and compliance needs
  • Regularly audit which services have access to your data

5. Reporting Security Vulnerabilities

We take security seriously. If you discover a security vulnerability in our plugin:

  • Email us immediately: [email protected]
  • Include detailed information about the vulnerability
  • Please practice responsible disclosure - don't publicly disclose until we've addressed it
  • We aim to respond within 48 hours and provide fixes quickly
  • We'll credit security researchers (if desired) in our changelog

6. Limitations

Please understand:

  • As a WordPress plugin, we cannot control your server security
  • We cannot guarantee security of third-party integrated services
  • Security depends heavily on proper WordPress and server configuration
  • No software is 100% secure - we do our best with industry best practices

Refund Policy

We offer a fair and transparent refund policy to ensure customer satisfaction.

1. 30-Day Money-Back Guarantee

We offer a 30-day money-back guarantee on all paid plans. If you're not satisfied with Advanced Form Integration for any reason, you can request a full refund within 30 days of your purchase.

What's covered:

  • All new license purchases (Personal, Business, Agency)
  • Monthly, annual, and lifetime licenses
  • Single site and multi-site licenses
  • All upgrade purchases within 30 days

2. How to Request a Refund

To request a refund, please contact our support team:

  • Email: [email protected]
  • Subject Line: "Refund Request - [Your License Key]"
  • Include: Your order number, license key, and reason for refund (optional but helps us improve)

We process refund requests within 3-5 business days. Refunds are issued to the original payment method used during purchase.

3. Refund Exclusions

Refunds are not available for:

  • After 30 Days: Requests made more than 30 days after purchase
  • License Renewals: Renewals of existing licenses after the renewal date has passed
  • Chargebacks: Refunds claimed through payment provider without contacting us first
  • Violation of Terms: Accounts terminated due to violation of our Terms of Service

4. Partial Refunds

In certain circumstances, we may offer partial refunds:

  • When payment gateway fees are involved, we may deduct these fees from the refund amount

Partial refunds are evaluated on a case-by-case basis.

5. License Deactivation

Upon issuing a refund:

  • Your license key will be immediately deactivated
  • You will lose access to premium features and updates
  • You may continue using the free version of the plugin
  • All integration configurations will remain on your server but premium integrations will be disabled

6. Renewal Cancellations

If you wish to cancel your renewal:

  • You can cancel at any time before the renewal date without penalty
  • Your license will remain active until the end of the current billing period
  • No refund will be provided for the current billing period
  • You can reactivate your subscription at any time

To cancel renewal, visit your account dashboard or contact support.

7. Technical Issues

If you're experiencing technical difficulties, we encourage you to:

  • Contact our support team for assistance before requesting a refund
  • Most issues can be resolved quickly with proper support
  • We offer comprehensive documentation and video tutorials
  • Our team is committed to helping you succeed

Refunds due to technical issues are only considered after our team has attempted to resolve the problem.

8. Exceptional Circumstances

We understand that exceptional circumstances may arise. If you have a unique situation that doesn't fit our standard refund policy, please contact us. We review each case individually and may make exceptions at our discretion.

Contact: [email protected]

Compliance

Our approach to privacy regulations and WordPress best practices.

1. Privacy Regulation Awareness

We design our plugin with awareness of major privacy regulations:

  • GDPR: EU General Data Protection Regulation - We provide tools to help you comply (data deletion, export, consent tracking)
  • CCPA: California Consumer Privacy Act - Our privacy-by-design approach supports your compliance efforts
  • Other Regulations: We follow privacy best practices that align with international data protection laws

Important: As a plugin, we provide tools - but you (the website owner) are the data controller. You're responsible for compliance with applicable laws in your jurisdiction.

2. WordPress Standards

We follow official WordPress development standards:

  • WordPress Coding Standards: PHP, JavaScript, CSS, and HTML standards
  • WordPress Security Best Practices: Data validation, sanitization, and escaping
  • WordPress Plugin Guidelines: Adhering to wordpress.org plugin directory requirements
  • Accessibility: Following WCAG guidelines where applicable in admin interfaces

3. Third-Party Services

When you integrate with third-party services:

  • Their Compliance: Each integrated platform maintains its own compliance (GDPR, SOC 2, ISO, HIPAA, etc.)
  • Your Responsibility: Review each service's compliance certifications before connecting
  • Data Processing Agreements: Many services offer DPAs - obtain them directly from the service provider
  • Payment Processing: Handled by Freemius (PCI DSS compliant payment processor)

4. Plugin Updates & Support

Our commitment to maintaining the plugin:

  • Regular updates for WordPress compatibility
  • Security patches released promptly when issues are discovered
  • Support for latest PHP versions
  • Public changelog documenting all changes
  • Email support for license holders

5. Data Handling Transparency

We believe in transparency about how data flows:

  • Form Data: Processed locally on your server, sent directly to integrated services
  • License Data: Email, license key, and site URL stored by Freemius for license management
  • No Tracking: We don't track your form submissions or user data
  • Optional Analytics: You can opt-in to anonymous usage statistics to help us improve

6. Your Compliance Responsibilities

As the website owner using our plugin, you should:

  • Understand which privacy laws apply to your business
  • Add appropriate privacy notices to your forms
  • Obtain necessary consents before collecting personal data
  • Review terms of service for all integrated third-party platforms
  • Maintain records of data processing activities
  • Implement appropriate technical and organizational security measures
  • Have procedures for data subject requests (access, deletion, etc.)

We provide the tools - you're responsible for using them in compliance with applicable laws.

7. No Guarantees

Please understand:

  • We do not provide legal advice or compliance guarantees
  • We cannot certify that using our plugin makes you compliant with any regulation
  • Compliance depends on your specific use case, jurisdiction, and implementation
  • Consult with legal counsel for compliance advice specific to your situation

8. Transparency & Communication

We maintain open communication:

  • Public changelog documenting all updates
  • Clear documentation of how the plugin works
  • Responsive support for questions and issues
  • Prompt disclosure of any security issues affecting users