Privacy Policy
Last updated: February 6, 2025
1. Introduction
This Privacy Policy describes how SmartLead WP ("we", "us", or "our") collects, uses, and protects information in connection with the SmartLead WP website (smartleadwp.com) and the SmartLead WP WordPress plugin (the "Plugin").
By using our website or Plugin, you agree to the practices described in this policy.
2. Information Collected on This Website
The SmartLead WP website (smartleadwp.com) is a static website hosted on Cloudflare Pages. We do not use cookies, tracking scripts, or analytics on this website. We do not collect any personal information through this website.
Cloudflare may collect standard web server logs (IP addresses, browser types, page requests) as part of their hosting infrastructure. This data is governed by Cloudflare's Privacy Policy.
3. Information Collected by the SmartLead WP Plugin
When installed on your WordPress site, the SmartLead WP Plugin collects the following information from form submissions:
- Name and contact information (email address, phone number)
- Company or organization name
- Message or inquiry content
- Technical information (IP address, browser user agent)
- Page URL where the form was submitted
- Form metadata (form plugin name, form ID, entry ID)
This data is collected solely from form submissions processed through supported form plugins (WPForms, Gravity Forms, Contact Form 7, Fluent Forms, and Formidable Forms).
4. How Data Is Used
Information collected by the Plugin is used for the following purposes:
- Lead scoring: Evaluating submission content for business relevance and assigning a priority score (1-100)
- Lead classification: Categorizing leads as Hot, Warm, Neutral, Cool, or Cold
- Notifications: Sending email alerts to your team about high-priority inquiries
- Analytics: Providing dashboard statistics about lead quality and conversion rates
- Learning: Improving scoring accuracy when you mark leads as converted
No automated decisions with significant legal or similar impact are made based on the scores. Scores are advisory and intended to help you prioritize follow-up.
5. Lead Scoring and AI Processing
The Plugin includes two scoring modes:
Local Scoring (Default)
By default, all scoring happens locally within your WordPress installation. No form data is sent to external servers for scoring purposes.
AI-Powered Scoring (Opt-In)
When you enable AI-powered scoring, form submission data is sent securely via HTTPS to the SmartLead WP Analysis Service (a Cloudflare Worker proxy), which forwards it to the Anthropic Claude API for analysis. This is entirely opt-in — you control which forms are scored using AI through the Plugin settings.
Data sent for AI scoring includes form field names, values, timestamps, and associated metadata, which may include personally identifiable information such as names, email addresses, phone numbers, and company names.
No form data is permanently stored outside your WordPress database beyond the time needed to process the scoring request.
6. Third-Party Services
When certain features are enabled, the Plugin communicates with the following third-party services:
SmartLead WP Analysis Service
- Purpose: AI-powered lead scoring, license validation, and usage tracking
- Data sent: Form field names and values, timestamps, metadata (may include PII)
- When: Only when AI scoring is enabled and a form is configured for scoring
- URL: smartlead-proxy.eliecervera.workers.dev
Anthropic Claude API
- Purpose: AI language model powering the scoring analysis
- Data sent: Processed form data forwarded by the SmartLead WP Analysis Service
- When: During AI scoring requests
- Privacy: Anthropic Privacy Policy
- Terms: Anthropic Terms of Service
Freemius
- Purpose: License management, plugin updates, and optional usage analytics
- Data sent: Site URL, plugin version, license key, and optional diagnostic data (opt-in)
- When: Plugin activation, license validation, and update checks
- Privacy: Freemius Privacy Policy
- Terms: Freemius Terms of Service
7. Data Storage and Security
All lead data collected by the Plugin is stored in your WordPress database, on your own hosting infrastructure. We do not have access to your WordPress database or the lead data stored within it.
We implement appropriate technical and organizational measures to protect data during transmission to our Analysis Service, including HTTPS encryption for all communications.
8. Data Retention
Lead data is retained in your WordPress database for as long as you choose to keep it. You can delete individual leads, bulk-delete leads, or uninstall the Plugin to remove all data. The Plugin provides built-in data management tools for this purpose.
Data sent to the SmartLead WP Analysis Service for AI scoring is not retained after the scoring response is returned.
9. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights regarding personal data processed through the Plugin:
- Right of access: You can request to see what personal data is stored about you
- Right to rectification: You can request corrections to your personal data
- Right to erasure: You can request deletion of your personal data
- Right to data portability: You can request an export of your personal data in a portable format
- Right to object: You can object to the processing of your personal data
The Plugin integrates with WordPress's built-in privacy tools. Site administrators can export or erase personal data through the WordPress Privacy settings (Settings > Privacy). These requests are handled via the standard WordPress personal data export and erasure system.
As a WordPress site owner using the Plugin, you are the data controller for the lead data collected on your site. You are responsible for complying with applicable data protection laws, including responding to data subject requests.
10. Children's Privacy
The Plugin and website are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has submitted personal data through a form on your site, please use the Plugin's data management tools to delete that information.
11. International Data Transfers
When AI scoring is enabled, form data may be transferred to and processed in the United States through our Cloudflare Worker infrastructure and the Anthropic Claude API. By enabling AI scoring, you acknowledge this transfer. All transfers are encrypted via HTTPS.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Website: smartleadwp.com
- WordPress.org: Plugin Support Forum