Your forms and entries live in your own WordPress database, on your own hosting.
Visitor IP addresses:
Visitor IP addresses are never stored, not on entries and not anywhere else. Only a one way fingerprint of the address is used, for the spam rate limit, the duplicate guard and the abandonment counter, and it expires within a day. There is nothing to switch on: Settings, Privacy simply confirms it.
Consent:
Add a "GDPR consent" field to any form, write your own wording and small print, and mark it Required. The entry records "Consent given".
Abandonment is a counter:
When a visitor starts typing, a start is counted. Partial answers are never stored or sent.
Private file uploads:
Files uploaded through a form can only be opened by a logged in administrator of your site, through the secure link on the entry and in your notification email. The visitor's thank you email shows the file name only.
Export and erase requests:
WordPress has its own tools for personal data requests under Tools, "Export Personal Data" and "Erase Personal Data". Both include ResultsAiX Forms entries. An export lists every entry made with that email address, with each answer, the form name, the date and where the visit came from. Erasing deletes those entries and every file they uploaded. Large requests are handled in batches, so a person with hundreds of entries never times out.
Automatic deletion of old entries:
Under Settings, Privacy, set "Auto-delete entries older than (days)" to any number up to 3650. A daily clean up then permanently removes entries older than that, along with any files uploaded with them. "0 keeps everything forever", and 0 is the default.
Deleting by hand:
Deleting an entry also deletes its uploaded files. Deleting a form deletes all of its entries and the files uploaded with them, after a warning that it cannot be undone.
What AI Insights sends:
When you click "Analyze with AI", your AI provider receives counts, averages, the attribution picture and short samples of written answers with any email address or phone number masked. Names, email fields, phone fields, addresses, uploaded files and hidden fields are never sent.
Outside services, only when you switch them on:
- Your AI provider receives the form description you type, or the summary described above when you click "Analyze with AI".
- Google reCAPTCHA v3, on the forms where you enable it, receives the visitor's token and IP address.
- Akismet, if you enable it, receives the submission's content, name, email, IP address and browser details under your own Akismet account.
- WP Sync passes leads to the services you connect there.
- Gravatar: the Customer insight panel on an entry loads an existing buyer's profile picture from gravatar.com, using a hashed email and no name. Untick "Show profile pictures from Gravatar in the Customer insight panel" under Settings, Privacy and gravatar.com is never contacted.
Apart from these, the plugin contacts the ResultsAiX licence server to check your key and looks for plugin updates.
The error log:
The Diagnostics tab keeps a log of problems from the last 7 days, such as an email that could not be sent, and older lines drop off by themselves. A line can mention the email address involved, and the log is shown only to administrators on the Diagnostics tab. Keys and passwords are never written to it. "Clear log" empties it at any time.
Switching off and removing the plugin:
In the words of the Settings screen: "Deactivating or updating the plugin never touches your data; only this button does." Switching the plugin off on the Plugins screen also keeps your licence on the site. Deleting the plugin from the Plugins screen clears its settings and its error log but leaves your forms, entries and uploaded files in place, so collected leads are safe.
Danger Zone:
At the bottom of Settings. Tick "I understand ALL forms and entries will be permanently deleted", type DELETE in capitals, click "Delete all plugin data" and confirm. Every form, entry, uploaded file, setting and the AI usage log is removed, and the plugin returns to a fresh install. There is no undo. Your licence stays active.