About this plugin
Infinitus Leads creates a pre-chat lead capture workflow for WordPress sites that use WhatsApp as a sales or support handoff.
A visitor completes a configurable form, WordPress validates and stores the lead locally, and only then does the browser open WhatsApp with a message built from the selected fields.
What makes this different
Infinitus Leads is not a social icon collection or a simple click-to-chat button. It addresses the handoff gap between a website and an external messaging application.
Because the lead is validated and stored before WhatsApp opens, the site owner keeps a recoverable first-party record even when the visitor closes WhatsApp or does not send the prefilled message. This is useful for sales and marketing teams that need qualification fields, a local lead inbox, CSV export, campaign context, privacy controls, and measurable handoff events without sending lead data to the plugin author.
How the workflow works
- The visitor opens the floating lead capture form.
- The plugin validates the configured fields and anti-spam checks on the server.
- The validated lead is stored in the site’s own WordPress database.
- An optional privacy-aware dataLayer event is pushed for the site’s existing Google Tag Manager setup.
- WhatsApp opens with a configurable message assembled from the approved form values.
The plugin does not claim that the visitor ultimately sends the message inside WhatsApp. It records the validated lead and the initiation of the WhatsApp handoff.
Main features
- Configurable floating entry point and responsive pre-chat form.
- Reusable field library for qualification, contact, select, checkbox, URL, phone, and message fields.
- Per-field controls for required status, local storage, and inclusion in the WhatsApp message.
- Editable WhatsApp message template.
- Local lead inbox with search, filters, details, configurable columns, bulk deletion, and CSV export.
- Source page, referrer, and permitted UTM capture.
- Configurable lead-retention period and optional data removal on uninstall.
- WordPress personal-data exporter and eraser integration.
- Native honeypot, signed form tokens, minimum completion time, deduplication, and rate limiting.
- Optional Cloudflare Turnstile, loaded only when the form is opened.
- Disabled, basic, or consent-gated enhanced dataLayer events for Google Tag Manager.
- Configurable appearance, responsive behavior, keyboard navigation, focus states, and reduced-motion support.
- Multisite-aware installation and per-site data storage.
- No telemetry or lead transmission to Infinitus Digital.
Privacy and data handling
Lead data is stored in a dedicated table in the site’s own WordPress database. The stored values depend on the fields enabled by the site administrator and may include form values, source and referrer URLs, permitted UTM parameters, consent status, and handoff status.
The plugin does not send telemetry, usage statistics, or lead records to Infinitus Digital.
Basic tracking does not include email or phone data. Enhanced tracking is optional and requires both an administrator acknowledgement and visitor consent. When enabled, selected email or phone values exist temporarily in the browser dataLayer so the site’s Google Tag Manager configuration can process them.
Site owners are responsible for configuring an appropriate privacy notice, consent mechanism, retention period, and legal basis for their jurisdiction.
External services
The plugin can interact with the following external services. None of these integrations sends telemetry to Infinitus Digital.
WhatsApp / Meta
me/ with a prefilled message. The message contains only the form values that the site administrator selected for inclusion. At that point, the visitor leaves the site and WhatsApp or Meta may process data under their own terms and privacy policy.
- WhatsApp Terms: https://www.whatsapp.com/legal/terms-of-service
- WhatsApp Privacy Policy: https://www.whatsapp.com/legal/privacy-policy
Cloudflare Turnstile
Cloudflare Turnstile is optional and disabled by default. com only after the visitor opens the form. On submission, WordPress sends the Turnstile response token, the configured secret key, and an idempotency identifier to Cloudflare’s Siteverify endpoint.
Form field values are not included in that verification request.
- Turnstile documentation: https://developers.cloudflare.com/turnstile/
- Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
- Cloudflare Website Terms: https://www.cloudflare.com/website-terms/
Google Tag Manager
The plugin does not install Google Tag Manager and does not contact Google by itself. dataLayer. A Google Tag Manager container already installed by the site owner may read that event and transmit information according to the container’s configuration.
Enhanced mode can expose selected email or phone values temporarily in the dataLayer only after the configured consent is given. Google Tag Manager should use its official user-provided data variable and handle hashing before transmission.
- Google Privacy Policy: https://policies.google.com/privacy
- Google Tag Manager Terms: https://www.google.com/analytics/terms/tag-manager/
Independence notice
Infinitus Leads is an independent product. , Google LLC, or Cloudflare, Inc. Their names and trademarks belong to their respective owners.