Wonyx Form Builder

Description

Wonyx Form Builder is a visual WordPress form builder by Wonyx IT Solutions. It includes responsive field layouts, multi-step forms, conditional logic, email notifications, SMTP delivery, email OTP verification, entry management, exports, webhooks, reporting and optional third-party integrations.

Main features include:

• Drag-and-drop visual builder with responsive desktop, tablet and mobile widths.
• Text, email, phone, textarea, dropdown, checkbox, radio, date, time, file, signature, consent, rating, NPS, calculation, repeater and other advanced fields.
• Multi-step forms, progress indicators and conditional show/hide/enable/disable logic.
• Email notifications, autoresponders, WP Mail, SMTP and fallback SMTP.
• Optional email OTP verification before submission.
• Anti-spam controls, rate limits, honeypot, duplicate checks and optional CAPTCHA providers.
• CRM-style entries, statuses, notes, assignees, PDF output, CSV/Excel-compatible export and reports.
• JSON/TXT form import/export. Sensitive credentials and secret-bearing endpoints are excluded from exports.
• Optional popup and slide-in display modes.
• Optional Google Places, Google Sheets/App Script, email marketing and webhook integrations.
• WordPress privacy exporter/eraser integration for stored form entries.

Use the shortcode:

[wonyx_form id="1"]

Popup example:

[wonyx_form id="1" mode="popup" trigger="Get A Quote"]

Source Code and Build Process

The JavaScript files assets/admin.js and assets/front.js are the human-readable source files used directly by WordPress. They are maintained directly in this plugin and are not generated from another source tree, minified, bundled or transpiled. No npm, webpack, gulp or other build step is required to regenerate them.

The plugin does not bundle third-party JavaScript libraries. Optional third-party services are loaded only when the administrator enables the corresponding integration and are documented under External Services below.

External Services

Wonyx Form Builder works without third-party services. The services below are contacted only when a site administrator explicitly enables and configures the related feature. Site owners are responsible for disclosing enabled services and obtaining any consent required by applicable law.

Google reCAPTCHA

Used only when reCAPTCHA is enabled for spam protection. The visitor’s CAPTCHA token and IP address may be sent to Google for verification.
Service: https://www.google.com/recaptcha/about/
Terms: https://policies.google.com/terms
Privacy: https://policies.google.com/privacy

hCaptcha

Used only when hCaptcha is enabled for spam protection. The visitor interacts with hCaptcha and verification data may be sent to Intuition Machines.
Service: https://www.hcaptcha.com/
Terms: https://www.hcaptcha.com/terms
Privacy: https://www.hcaptcha.com/privacy

Cloudflare Turnstile

Used only when Turnstile is enabled for spam protection. Verification data may be sent to Cloudflare.
Service: https://www.cloudflare.com/products/turnstile/
Terms: https://www.cloudflare.com/website-terms/
Privacy: https://www.cloudflare.com/turnstile-privacy-policy/

Google Maps Platform / Places

Used only when Google Places address autocomplete is enabled. Address queries and related browser data are handled by Google Maps Platform.
Service: https://developers.google.com/maps
Terms: https://cloud.google.com/maps-platform/terms
Privacy: https://policies.google.com/privacy

Google Sheets / Apps Script

Used only when the administrator supplies an Apps Script Web App URL and enables the integration. Configured submission fields are sent to that administrator-controlled endpoint.
Service: https://developers.google.com/apps-script
Terms: https://policies.google.com/terms
Privacy: https://policies.google.com/privacy

Mailchimp

Used only when enabled with an API key and audience. The configured contact email is sent to Mailchimp.
Service: https://mailchimp.com/
Terms and privacy information: https://mailchimp.com/legal/

GetResponse

Used only when enabled with an API key and campaign. The configured contact email is sent to GetResponse.
Service: https://www.getresponse.com/
Terms and privacy information: https://www.getresponse.com/legal

Campaign Monitor

Used only when enabled with an API key and list. The configured contact email is sent to Campaign Monitor. The plugin does not assert tracking consent on behalf of the visitor.
Service: https://www.campaignmonitor.com/
Terms and privacy information: https://www.campaignmonitor.com/policies/

Webhooks and automation endpoints

Generic form webhooks, Google Apps Script endpoints, and Zapier/Make/Pabbly-style automation webhooks are contacted only when an administrator enters an endpoint URL and enables the feature. The configured form submission payload is sent to that administrator-selected endpoint. Terms and privacy policies depend on the endpoint/service selected by the site owner.

SMTP servers

If Custom SMTP is selected, email content and recipient/sender metadata are transmitted to the SMTP server configured by the site administrator. Terms and privacy policies depend on that SMTP provider.

Privacy

The plugin stores form submissions in the WordPress database. Depending on form configuration, entries may contain names, email addresses, phone numbers, addresses, uploaded files, signatures, referral data, campaign parameters and an IP address.

IP collection, partial/abandoned entry capture and campaign tracking are optional. New forms have campaign tracking disabled by default. WordPress privacy export and erase requests can export or anonymize stored entries associated with a requested email address. Local files stored by upload/signature fields in matching entries are also removed when possible.

Wonyx Form Builder itself does not send usage telemetry to Wonyx IT Solutions.

Technical details