Data security for inquiry forms

For website owners using AI-Inquiro · Last updated: June 29, 2026

AI-Inquiro is an inquiry / lead CRM for your WordPress site. When someone submits a form, their data is stored in your database on your hosting — not on AtoZ servers.

How storage works

• Your visitors’ inquiries → saved to WordPress tables (e.g. wp_aiinq_leads) on your server;
• AtoZ license server → only license email, site URL, and plan (no lead content);
• Third-party APIs (AI, SMS, email) → only if you connect them; data flows under those providers’ terms.

Built-in protections

Feature	Purpose
HTTPS on your site	Encrypts data in transit (you configure SSL on hosting)
Form nonce + honeypot	Blocks forged and bot submissions
Turnstile / reCAPTCHA	Optional spam protection (Settings → Form security)
Role capabilities	Only authorized staff can view or export leads
REST API key	Pro API requires secret header; rotate if leaked
WordPress privacy tools	Export / erase personal data on request

What you should configure

1. SSL certificate on your domain (most hosts provide free TLS).
2. Turnstile or reCAPTCHA on public inquiry forms.
3. Strong wp-admin passwords and few admin users.
4. Hosting with encrypted storage and automated backups.
5. Consent text on forms where your privacy law requires it (Settings → GDPR).
6. Privacy policy on your site explaining how you handle inquiries.

Encryption at rest

Lead fields are stored in plain text in MySQL so you can search and manage inquiries (standard for WordPress CRMs). Database encryption at rest is typically provided by your hosting provider. The plugin does not replace a secure host or SSL.

You are the data controller

Your website visitors submit data to you. You decide retention, who can access leads, and how to respond to privacy requests. AtoZ provides the software; you operate it on your infrastructure.

Questions: supports@atozinfoway.ca

← Back to AI-Inquiro