Pricing

Privacy Policy

Last updated: June 16, 2026
Effective date: June 16, 2026

Elicus Technologies Private Limited (“Elicus”, “we”, “our”, or “us”), the operator of Neural Forms, is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and what rights you have. This policy applies to neuralforms.ai, the Neural Forms WordPress plugins (Lite and Pro), the Neural Forms AI service, and all related products.

If you have any questions about this policy, please reach us through our contact form at https://neuralforms.ai/contact-us/.

1. Data controller

For the purpose of the EU General Data Protection Regulation (GDPR), UK GDPR, and similar data protection laws, the data controller is:

Elicus Technologies Private Limited
45, Vidhyut Nagar B
Ajmer Road
Jaipur, Rajasthan, India 302021

To contact us about any privacy-related matter, use our contact form at https://neuralforms.ai/contact-us/ and select “Privacy and data” as the topic.

2. Information we collect

We collect the following categories of information.

Account and license information

When you create an account, purchase a product, or activate a license, we collect:

  • Name
  • Email address
  • Website URL (if provided)
  • Country (for tax calculation)
  • License key and API key details
  • Plan and subscription details
  • Billing information (processed by our payment provider, see Section 6)

We do not store full payment card details on our servers.

Website and plugin telemetry

When you use Neural Forms, we may receive:

  • Site URL or hashed site identifier
  • WordPress version
  • PHP version
  • Plugin version
  • License status
  • Feature usage (which features are enabled or used)
  • API request metadata (timestamps, endpoint, response codes)
  • Error logs and diagnostic data
  • Browser type and version (for the admin dashboard only)

Form submission data

Neural Forms is a form plugin. Form submissions on websites that use Neural Forms may include any data the site owner chooses to collect, including:

  • Names, email addresses, phone numbers
  • Messages, quiz answers, poll responses
  • File uploads (if enabled by the site owner)
  • IP address and user agent (unless the site owner enables Privacy Mode)

For the Lite plugin, form entries are stored on the website owner’s WordPress database and remain under the site owner’s control.

For Pro features and AI processing, selected form content may be sent to the Neural Forms AI service for processing (see Section 3).

AI processing data

If AI features are enabled, the following data may be sent to our AI processing service:

  • Form submission text (the actual answers your visitors enter)
  • Form field labels and types (the schema)
  • Business context configured by the site owner (such as site profile data)
  • AI prompts entered by administrators
  • Generated AI output (summaries, classifications, draft replies)

We do not send the following to AI processing:

  • WordPress admin credentials or passwords
  • IP addresses (unless explicitly required for spam scoring, which is logged separately)
  • Personal information about the site owner that is not part of the form submission

Security and abuse logs

To protect our service, we maintain limited security logs:

  • Request ID
  • Site or account identifier
  • Safety category (if a request is flagged)
  • Timestamp
  • Feature used
  • Redacted content preview (first 100 characters, used only for abuse review)
  • Content hash (SHA-256 of full request)
  • Hashed IP address or hashed user-agent (for rate limiting)

These logs are kept for 90 days unless required longer for security, legal, or abuse investigation purposes.

3. How we use information

We use the information we collect for the following purposes:

  • Provide and maintain our products and services (legal basis: contract)
  • Process payments and manage subscriptions (legal basis: contract)
  • Deliver plugin updates (legal basis: contract)
  • Provide AI features when enabled by the user (legal basis: contract)
  • Detect spam, abuse, and fraud (legal basis: legitimate interest, legal obligation)
  • Improve product performance and reliability (legal basis: legitimate interest)
  • Provide customer support (legal basis: contract)
  • Send important product and account notifications (legal basis: contract, legitimate interest)
  • Send marketing emails, only with consent or as permitted by law (legal basis: consent, legitimate interest)
  • Comply with legal obligations (legal basis: legal obligation)

We do not sell your personal information to third parties. We do not sell or share form submission data for advertising.

4. Automated decision-making and AI

Neural Forms uses AI processing for the following purposes when enabled by the site owner:

  • Form submission analysis (summary, category, priority score)
  • Draft reply generation
  • Spam detection
  • AI-assisted form generation

These AI features produce suggestions and drafts for the site owner to review. They do not make legal or similarly significant decisions about individuals automatically. The site owner retains full control over what to send to form visitors and what action to take based on AI output.

If you have questions about how AI processes your form submission as a visitor on a site that uses Neural Forms, contact the site owner directly. They are the data controller for their form submissions.

5. Cookies and similar technologies

Our website (neuralforms.ai) uses cookies and similar technologies for the following purposes.

Essential cookies (always active)

  • Login session cookies for /my-account/
  • Cart and checkout cookies (WooCommerce)
  • Security cookies (CSRF protection)
  • Cookie consent preference

Analytics cookies (only with consent where required)

  • Anonymous traffic analytics

Marketing cookies

We do not currently use marketing cookies or advertising trackers.

You can control cookies through your browser settings. In EU and UK regions, you will see a cookie consent banner where you can accept, reject, or customize your preferences.

The Neural Forms WordPress plugin itself does not set any cookies on websites that use it.

6. Data sharing and sub-processors

We share information with the following categories of third parties only when needed to operate, secure, or improve our services.

Payment processors

  • Stripe (for credit card and subscription processing)
  • PayPal (if offered as a payment option)

Email delivery

  • Email service provider for transactional emails (account verification, license keys, password resets)

AI service providers

Neural Forms AI service, operated by Elicus Technologies, may use upstream AI providers including OpenAI, Anthropic, or similar. Processed data is limited to what is required for the requested AI feature.

Analytics

  • Web analytics for neuralforms.ai (anonymous, where applicable)

Legal authorities

  • Law enforcement or government authorities, when legally required

We require all sub-processors to provide appropriate safeguards for personal data. A current list of sub-processors is available on request through our contact form.

7. International data transfers

Elicus Technologies is based in India. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data may be transferred to and processed in India and other countries outside the EEA, UK, or Switzerland.

For these transfers, we rely on the following safeguards:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions where available
  • Other appropriate safeguards under applicable data protection laws

You can request a copy of the relevant safeguards by reaching us through our contact form.

8. Data retention

We retain personal information only for as long as needed to fulfill the purposes described in this policy.

  • Account information: while account is active, plus 12 months after closure
  • License and subscription data: duration of license, plus 24 months for billing and tax records
  • Billing records: 7 years (legal requirement in India)
  • AI processing logs (request metadata): 30 days
  • Security and abuse logs: 90 days, longer if required for legal investigation
  • Support tickets and correspondence: 24 months
  • Marketing email subscribers (if applicable): until unsubscribe, plus 12 months for record keeping
  • Anonymous analytics: 26 months

Form entries stored on the site owner’s WordPress site are controlled by the site owner. Their retention is determined by the site owner’s configuration, not by us.

9. Your rights

Depending on your location, you have the following rights regarding your personal data.

Under GDPR (EU and UK)

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to object to processing based on legitimate interest
  • Right to data portability
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

Under CCPA and CPRA (California)

  • Right to know what personal information we collect
  • Right to delete your personal information
  • Right to correct inaccurate personal information
  • Right to opt out of the sale or sharing of personal information (we do not sell or share for advertising)
  • Right to limit use of sensitive personal information
  • Right to non-discrimination for exercising your rights

Other regions

Residents of other regions (including Brazil under LGPD, Canada under PIPEDA, and others) may have similar rights under applicable local law.

To exercise any of these rights, contact us through our contact form at https://neuralforms.ai/contact-us/ and select “Privacy and data” as the topic. We will respond within 30 days, or sooner if required by applicable law. We may need to verify your identity before processing certain requests.

If you are unhappy with our response, you have the right to lodge a complaint with your local data protection authority. EU residents can find their local authority at https://edpb.europa.eu.

10. Data security

We use reasonable technical and organizational measures to protect personal information:

  • Encryption in transit (HTTPS and TLS)
  • Encryption at rest for sensitive data
  • Access controls and audit logging
  • Regular security reviews
  • Sub-processor due diligence
  • Employee privacy training

No system is completely secure. We cannot guarantee absolute security but we work to minimize risk.

Data breach notification: If we become aware of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities without undue delay and within 72 hours where required by GDPR.

11. Children’s privacy

Neural Forms is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16 without parental consent. If you believe we have collected information from a child, reach us through our contact form and we will delete it.

Site owners who use Neural Forms on websites directed to children are responsible for obtaining appropriate parental consent under applicable laws (such as COPPA in the United States).

12. Responsibilities of site owners

If you use Neural Forms on your website, you are the data controller for form submissions you collect through your site. You are responsible for:

  • Creating and publishing your own privacy policy
  • Informing your website visitors about what data your forms collect
  • Disclosing whether you have enabled AI processing for form submissions
  • Obtaining any consent required by applicable law
  • Managing form entries stored in your WordPress database
  • Responding to data subject requests from your visitors
  • Complying with all privacy and data protection laws applicable to your jurisdiction and audience

Elicus is a data processor for the form submission data sent to our AI service. We process this data only on your instructions and in accordance with our Data Processing Agreement (available on request through our contact form).

13. Marketing communications

If we send you marketing emails, you can unsubscribe at any time by clicking the unsubscribe link in any email or by reaching us through our contact form.

We do not send marketing communications to website visitors whose form submissions are processed through Neural Forms. Site owners are responsible for any marketing communications they send.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the “Last updated” date at the top of this page
  • Notify account holders via email or in-product notification
  • Where required, obtain renewed consent

Continued use of Neural Forms after a policy change means you accept the updated policy.

15. Contact us

For privacy-related questions, requests, or complaints, please use our contact form at https://neuralforms.ai/contact-us/ and select “Privacy and data” as the topic.

For postal correspondence:

Elicus Technologies Private Limited
45, Vidhyut Nagar B
Ajmer Road
Jaipur, Rajasthan, India 302021