FormGate AI – Antispam

FormGate AI connects supported WordPress contact forms to the FormGate service. You can define a custom prompt to receive in your inbox only the type of messages you actually want. FormGate classifies each submitted message as valid, spam, not relevant, or suspicious, then applies the delivery rules configured in the FormGate dashboard.

The plugin supports:

• Contact Form 7
• WPForms Lite and Pro
• Gravity Forms
• Elementor Pro Forms
• Custom forms through the PHP function wwfgai_send( $fields )

FormGate handles delivery and quarantine for configured forms. If FormGate is unreachable, the native WordPress form email remains active.

An active FormGate account is required. You can create or manage an account at https://app.formgate.it/.

External service disclosure

This plugin connects to the external FormGate AI service operated by Wonder Web.

Service endpoints used by the plugin:

• https://api-formgate.wonder-web.it
• https://app.formgate.it

The plugin does not contact FormGate immediately on activation. Network requests to FormGate happen only after a site administrator explicitly starts the automatic connection flow, manually tests/saves API credentials, disconnects an existing connection, or after the plugin has been configured and a supported form is submitted.

Data sent to FormGate may include:

• During automatic connection: the WordPress site domain and site name.
• During manual connection or connection test: the Site ID and API key entered by the administrator.
• During form processing: the mapped form fields name, email, phone, and message, when present in the submitted form. The message field is required for classification.

FormGate uses the submitted data to classify the lead, manage delivery/quarantine, show the submission in the FormGate dashboard, and provide service diagnostics. The FormGate backend sends only the message text to its AI classifier.

Terms of service: https://app.formgate.it/terms

Privacy policy: https://app.formgate.it/privacy-policy

Privacy

FormGate AI is a SaaS integration. Site owners should disclose this processing in their own privacy policy before enabling the plugin on live forms.

The local WordPress plugin stores the FormGate API credential encrypted in the WordPress options table using Sodium when available, with AES-256-GCM as fallback. The raw API key is never printed back into the admin page after it is saved.

If the plugin is not configured, form submissions are not sent to FormGate.

License

FormGate AI is licensed under GPLv2 or later.

All PHP, JavaScript, CSS, inline SVG icons, and image assets included in this plugin package are licensed under GPLv2 or later, or are GPL-compatible assets owned by Wonder Web and distributed with this plugin under GPLv2 or later.