Security and data processing
1. Basic principle of data processing
The plugin MCFP – My Custom Form Plugin is a software that runs directly within a WordPress installation.
All data collected via forms is stored on the server of the respective website where the plugin is installed.
Installing the plugin does not grant the provider direct access to your WordPress database. Additional transmissions via email, support, or voluntary AI assistance are described below.
2. Data processing at the customer
Form processing and storage take place in the WordPress installation of the respective website operator. When sending emails, content is transmitted to the configured recipients and the used mail service.
This means:
- Form data is stored on the customer's server
- Uploads are stored locally in the WordPress installation
- Signatures are also stored locally
- additional transmissions through configured mail dispatch and voluntary AI usage
The website operator is therefore responsible themselves within the meaning of the GDPR for processing this data.
3. License portal
The portal at mycustomform.com manages user accounts, licenses, payments, updates, and support. It also mediates requests for voluntary AI assistance.
Depending on the function used, the following data in particular may be processed:- Name
- Email address
- License information
- Account data and payment allocations via Stripe
- Support messages and voluntarily submitted attachments
- when using AI: the texts transmitted for the respective request
- Licenses to manage
- Providing updates
- to process support requests
Voluntary AI assistance and support
If AI assistance in the form is enabled and used, questions and entries from the current form page are transmitted via the portal to OpenAI. Password fields, signatures, and file contents are not transmitted. Without enabled AI assistance, this transmission does not occur.
The portal chat also processes entered messages via an AI service. Do not enter confidential customer information there. For support requests, the portal processes submitted messages and attachments. Support may create an AI response draft from limited text excerpts; known license keys are removed for this purpose. The response is sent by support.
The public demo is a shared test environment. Use only invented sample data there; the demo is reset regularly.
4. Server location
The infrastructure of the license portal is operated within the European Union.
Therefore, the processing of personal data is subject to the requirements of the General Data Protection Regulation (GDPR).
5. Security
Appropriate technical and organizational measures are used to protect the data, in particular:
- encrypted HTTPS connections
- regular security updates
- Access restrictions on server systems
- Minimization of Stored Personal Data
6. Responsibility of Website Operators
Since the data processing takes place within the respective WordPress installation, the responsibility for data protection and data security lies with the operator of the respective website.
This includes in particular:- Web server security
- regular WordPress updates
- Backups
- Access protection for administration areas
7. Contact
For questions about data security or data processing, the provider can be contacted at the following address:
support@mycustomform.com