Early access · Updated October 14, 2026
Privacy, in plain language.
SubmitSignal is operated by Axtrel AI LLC and monitors authorized WordPress contact forms. This notice describes the early access implementation. Questions or requests can be sent to jarvismaximum+submitsignal@gmail.com.
What the app stores
When you sign in, the hosting platform provides an account identifier, email address and, when available, display name. We store the account identifier and email to keep your workspace separate and deliver service alerts. We store connected site URLs, site names, form identifiers and titles, monitor settings, test times, stage results and incident history. Plugin credentials are hashed in the service database.
What the plugin sends
After an administrator explicitly connects the plugin, it sends the selected site and supported form inventory, heartbeat times, and metadata indicating successful form processing or a mail handoff/failure. Events include a random identifier, form ID and timestamp; synthetic checks also include a test identifier. It does not send visitor names, email addresses, message bodies, field values or attachments to this app. Disconnecting the plugin stops future transfers.
Browser tests and service providers
When browser checks are connected and a monitor is authorized, a browser provider loads that form's public page and submits clearly labeled synthetic data. The provider sees the public page and test data. Use ordinary public contact pages without private or sensitive content. This release does not store screenshots. The app runs on Sites infrastructure and Cloudflare storage. Browserless is the prepared browser integration; Resend is the prepared alert provider. Stripe processes billing when paid plans open; this app does not receive card numbers. Each provider also operates under its own privacy terms.
Your controls and retention
You can pause a monitor, disconnect a site, export your account data or delete your account from the dashboard. Site deletion revokes its plugin token and removes its associated monitoring records. Account deletion removes app records; an existing subscription must be canceled first. Once the scheduler is connected, routine cleanup removes form event metadata after 30 days and test history after 90 days. While scheduling is not connected, these automatic retention jobs do not run; manual deletion remains available. Providers may retain separate operational logs, backups or legally required billing records under their own policies.
Cookies and analytics
The hosting platform uses authentication cookies to sign you in. The app does not add advertising trackers or sell contact-form data. The current plugin does not record individual visitors' field interactions or use form contents for AI training.
Changes
Changes to this notice will appear here with an updated date. A new integration that collects additional data will require its own setup and disclosure.