Defform Contact Form

Defform is a contact form plugin with built-in AI that automatically filters out sales emails, junk mail, and spam.

Stop unwanted messages from cluttering your inbox — only genuine customer inquiries will reach you.

Key Features:

• Create simple contact forms

• Easy placement with shortcodes

• AI-powered automatic filtering of sales emails, junk mail, and spam

Highlights:

• Built-in AI filtering for sales emails, junk mail, and spam

• Intuitive admin dashboard

• Lightweight and simple design

Supported Languages (admin UI):

Japanese, English, German, French, Spanish (Spain), Portuguese (Brazil), Portuguese (Portugal), Italian, Dutch, Korean, Traditional Chinese (Taiwan), Simplified Chinese (China), Indonesian, Vietnamese, Turkish, Polish, Swedish, Thai (18 languages).

External Services

com ), which uses Supabase as its backend infrastructure.

Defform Service

Defform is a form-building and AI-powered spam filtering service. This plugin requires a Defform account to create and manage contact forms.

• Data sent: Login credentials (email and password) for Defform account authentication, company and form identifiers for retrieving form data.

• When: When the site administrator logs into the Defform service from the plugin settings page, and when fetching form lists or build data from the admin dashboard.

• Service provider: TodoONada Inc.

• Terms of Service

• Privacy Policy

Supabase

Supabase is a cloud platform that provides the backend infrastructure (authentication, database, and file storage) for the Defform service. All API communication between this plugin and the Defform service is routed through Supabase.

• Data sent: Authentication tokens, form metadata queries, and requests to download form embed files (JavaScript) from cloud storage.

• When: During login/logout, when loading form lists in the admin dashboard, and when downloading form build files for embedding on the frontend.

• Supabase anonymous key: The plugin includes a Supabase public anonymous key (anon key). This is not a secret — it is a client-safe key designed for use with Supabase Row Level Security (RLS), similar to a public API key. It does not grant privileged access. It can be overridden in wp-config.php by defining DEFFORM_SUPABASE_ANON_KEY before the plugin loads.

• Data protection: The Defform service enforces Supabase Row Level Security (RLS) policies so that only authenticated users can access their own inquiry data. Other users’ data is restricted at the database level. Additionally, an alerting mechanism is in place to immediately notify administrators if any access control violation occurs or if the access control system becomes inactive.

• Service provider: Supabase, Inc.

• Terms of Service

• Privacy Policy