Buyer FAQ
Short answers before you buy.
Last updated: 2026-06-16. Product answers only; legal/tax pages remain the source for policy details.
Direct answer
Buy this if you already use Cornerstone Forms and need selected fields or linked uploads encrypted at rest in WordPress. Do not buy it as a substitute for a full compliance program, hosting hardening, backups, privacy review, or legal advice.
Product fit
Is this for every WordPress form plugin?
No. It is built for Cornerstone Forms. If a site uses Gravity Forms, Ninja Forms, WPForms, Forminator, or a hosted form tool, this plugin is not the right product.
What kind of forms is it best for?
Client intake, HR requests, legal forms, member portals, private support cases, and upload-heavy forms where selected values should not sit readable in WordPress storage.
Does it make a site GDPR or HIPAA compliant?
No. It is a focused storage-protection control. Compliance still depends on lawful basis, notices, access controls, hosting, backups, retention, contracts, staff process, and incident handling.
License and updates
What does the paid license cover?
The plugin code is GPL. The paid annual license covers private update access, gated ZIP downloads, site activations, and activation/update support for the plan limit.
How do updates reach WordPress?
After payment, the buyer receives a license key. The plugin uses that key to activate a site and request private update metadata. Active licenses receive package URLs for gated ZIP downloads.
Will an expired license disable encryption?
No. Expiry, cancellation, refund, or suspension stops future private updates and downloads. Installed encryption/decryption keeps working on the WordPress site.
Security boundary
What data is sent to the license API?
License key, normalized site URL/domain, product slug, plugin version, WordPress version, and PHP version. The license API does not need submissions, uploads, encrypted values, decrypted values, encryption keys, search keys, or audit logs.
What happens if the encryption key is lost?
Encrypted values cannot be recovered without the site encryption key. Back up the key with the same care as database credentials and production secrets before protecting real submissions.
Can existing entries be protected?
Use the plugin rollout checklist and batch tools from staging first. Existing production data should not be changed until backups, key recovery, permissions, and rollback expectations are tested.
Billing, tax, and support
Are prices tax-inclusive?
Prices are shown in USD on the product page. Stripe Checkout shows the final payable total and applicable tax behavior before payment once live Stripe Tax and seller settings are finalized.
Can a business buyer enter a VAT or tax ID?
The checkout is configured to support tax ID collection where Stripe supports it. Final behavior depends on Stripe Dashboard tax settings and the seller's tax registrations before launch.
Where are invoices and receipts?
Stripe sends receipts and provides invoice/payment records through the Stripe Customer Portal after checkout, once the production Customer Portal and invoice settings are finalized.
What support is included?
Support is intended for activation, update delivery, installation blockers, and license-status issues on supported WordPress/PHP/Cornerstone versions. Custom integrations, legal review, and hosting remediation are outside the license.
Still deciding?
Check compatibility and billing details before choosing a license. The checkout remains closed until seller, tax, legal, withdrawal, Customer Portal, and invoice gates are finalized.