Auto Form Builder (AFB) is the free WordPress form builder that gives you what other plugins charge for. Build contact forms, multi-step forms, surveys, file-upload forms, product order forms and payment forms with drag and drop, no code and no monthly fees. Build a form by hand or let AI build it for you, and embed your forms, or their AI chat version, on any website, WordPress or not.

Free forever, with no paid add-ons. The “Add-Ons” screen is simply optional free modules you switch on in one click. Stripe Payments adds no fee of its own: you pay only Stripe’s standard processing fees. The AI features are optional, and the only thing you can ever pay for is AIDA credits for them, once the free trial credits are used up.

Privacy-first by design: your submissions stay on your own site, and the plugin contacts no external service unless you enable a feature that needs one.

Watch the full overview video · See all features · Support

Drag & Drop Builder

The visual drag-and-drop builder lets you add and reorder fields, undo and redo, and preview on desktop, tablet and mobile. Start from one of 28 templates in the searchable gallery (contact, quote, booking, order, survey, job application and more), a blank canvas, or a description for AI. Style your forms with theme presets, saved themes, a header image, colors, fonts and layout, with a live preview.

20+ Field Types

Text, Textarea, Email, Phone, Number, Date, Time, Month & Year, Checkbox, Radio, Dropdown, Name, Address, File Upload, Signature, Color Picker, Calculation, Products, an HTML content block and Page Break, plus four survey fields: Tabular Survey (Likert grid), Star Rating, NPS and Opinion Scale. Fields support validation, help text, icons, URL prefill and conditional logic. See the full field reference.

Products Field (free)

List what you sell with a price, optional description and image, shown as checkboxes, a single choice, quantity steppers or cards. Visitors pick quantities within your limits and see a live order total. Products work with conditional logic and calculations, a link can preselect products and quantities, and with Stripe Payments visitors pay through an itemized Stripe Checkout. Prices are one-time; recurring billing is not available yet.

Logic, Calculations & More

Conditional logic — show or hide fields with AND/OR conditions, and change the success message, redirect or notification emails.
Calculations — live totals, quotes and scores, recalculated on your server so visitors cannot change them.
Live field values — show a visitor’s answers in labels, help text, HTML blocks, step titles and the submit button as they type, for example “Thanks, {first_name}”, with default text while a field is empty.
Password show/hide — an eye button inside password fields shows or hides what was typed.
Multi-step forms — steps, a progress bar and branching that skips steps that don’t apply.
Surveys — Likert grids, star ratings, NPS and opinion scales, with charts and an NPS trend.
Signature — visitors sign with a mouse, finger or stylus.
Partial entries — unfinished answers are saved and removed after the retention period you choose.

Submissions & Notifications

An inbox with Unread, Starred, Spam and Trash tabs, search, filters, bulk actions and CSV or JSON export. Quick view opens any entry over the list, and each entry page shows the answers first, with the details, tags and payment beside them. On a submission page, Previous, Next and “Next unread” move through your list, keyboard shortcuts save clicks, and “Reply by email” opens your email app. Admin and confirmation emails use your own recipients, subject and placeholders, in HTML or plain text, and can link to uploaded files with a login link or an expiring secure link. See submission management.

Embed Anywhere & Pass Answers On

Every form has an embed code for any site, including non-WordPress sites and page builders, plus a Gutenberg block. Prefill fields from the URL, and pass answers on through {field} tags in a redirect URL, for example to a booking page or CRM.

Free Add-Ons

Switch these on under Forms Add-Ons:

Stripe Payments — Stripe Checkout with your own Stripe account, for a fixed price, an amount the visitor enters, a Calculation result or a Products order. No added fee: you pay only Stripe’s standard processing fees.
Popup Forms — modal, slide-in, sticky bar, full-screen, welcome mat or floating button.
Form Analytics — views, submissions and conversion rates per form.
Spam Protection — Google reCAPTCHA and Cloudflare Turnstile.
User Registration & Login — create accounts from any form and add a login form.
Slack Notifications, Entry Tags and Google Sheets.
Ad Tracking — remembers ad click IDs and UTM parameters in one first-party cookie, only for visitors who arrive from an ad or a tagged link, so webhooks can tell your ad platform or CRM which ad brought each lead.

Webhooks and import/export of forms and entries are built in. Send each submission to several webhooks (Zapier, Make, a CRM or any endpoint), as the standard data or as your own JSON template (for example for the Meta Conversions API), signed if you like, in the background with automatic retries. Templates use answer and submission tags with modifiers such as |e164 and |sha256, and any field can be set to “Never send to webhooks”.

AI Features (optional)

AI Assistant — build a form from a description or document, generate logic, summarize submissions and draft replies.
AI Conversation — turn any form into a friendly chat, with optional appointment booking, on your own pages or embedded on any website. Its Appearance tab styles each chat with presets (Light, Dark, Transparent or “Match my form”), your colors, Google fonts, a header and avatar, and an optional floating chat button.

They are switched on by default but send nothing until you connect an AIDA account, and you can switch them off under Forms Add-Ons. A free AIDA account at autoformcrm.com includes trial credits; after that, AI usage needs one-time credit packs. See “External Services” for exactly what is sent.

External Services

By default the plugin contacts no external service. Each service below is used only after you set up the feature that needs it.

AIDA — AI Assistant & AI Conversation (optional)

Provider: AIDA by Auto Form CRM (https://autoformcrm.com/); requests are processed by Anthropic.
When: only after an administrator connects an AIDA account, and then each time an AI feature is used. The AI modules are on by default, but nothing is sent until an account is connected. The core builder never contacts AIDA.
Account & cost: a free AIDA account with trial credits; after that, one-time credit packs bought on autoformcrm.com in a new tab (no payment inside the plugin). All non-AI features stay free.
Data sent (only for the action you trigger): on connect, your site address and a one-time code; the form description or document when building a form; submission content when you ask for a summary, reply or answer about submissions; messages typed into the admin assistant; and, if AI Conversation is on for a public form, the visitor’s chat messages. The AIDA token is sent server-side only and stored encrypted.
Not sent: anything for AI features you do not use, and never WordPress passwords.
Terms / privacy: https://autoformcrm.com/terms, https://autoformcrm.com/privacy, https://www.anthropic.com/legal/commercial-terms, https://www.anthropic.com/legal/privacy

Deactivation feedback (opt-in, one-time)

Provider: Auto Form CRM, https://autoformcrm.com/api/v1/plugin-feedback
When: only when an administrator clicks “Submit & Deactivate” in the deactivation dialog. Skipping or closing it sends nothing.
Data sent: the chosen reason, an optional comment (up to 1000 characters), WordPress, PHP and plugin versions, and site locale. The exact payload is shown before sending.
Not sent: site URL, admin name or email, user ID, IP address or form data.
Terms / privacy: https://autoformcrm.com/terms and https://autoformcrm.com/privacy

Anonymous usage data (opt-in, off by default)

Provider: Auto Form CRM, https://autoformcrm.com/api/v1/plugin-telemetry
When: only if you turn on “Help improve Auto Form Builder by sending anonymous usage data” (onboarding or Settings General): one “install” event on opt-in and one “uninstall” event on deletion.
Data sent: a random site ID, plugin, WordPress, PHP and MySQL versions, install version, locale, multisite flag, days since install, form and submission counts as ranges, active modules and onboarding status. The full list is shown next to the checkbox.
Not sent: site URL, admin name or email, user ID, IP address or form content.
Terms / privacy: https://autoformcrm.com/terms and https://autoformcrm.com/privacy

Slack Notifications (off by default)

Provider: Slack Technologies, LLC (https://slack.com/). Only hooks.slack.com webhook URLs are accepted.
When: only after you add your own Slack webhook URL and enable it for a form: on each submission of that form and on “Send Test”.
Data sent: the form title and site name, plus the submitted answers only if “Include answers” is on. Passwords, CAPTCHA values and file contents are never sent; files appear by name only.
Terms / privacy: https://slack.com/terms-of-service and https://slack.com/trust/privacy/privacy-policy

Stripe Payments (add-on, off by default)

Provider: Stripe, Inc. (https://stripe.com/). Only https://api.stripe.com is contacted, from your server, with your own Stripe API key.
When: only after you enable the add-on and connect a key: to verify the key; to create or delete a webhook endpoint in your Stripe account; about every six hours while the settings page is open, to re-check the key; when a visitor submits a payment form (to create a Checkout session) and returns from it; when Stripe notifies your site of a payment event (signature-verified); and every ten minutes through WP-Cron while payments are still pending.
Data sent: your API key (server-side only, stored encrypted); your webhook URL and site name; for payments, the amount, currency, product name (for a Products field, each product’s name, quantity and price), return page addresses, submission and form IDs, and the payer’s email only if you map an email field. Card details are entered on Stripe’s page and never touch your site.
Fees: the plugin adds no fee. Payments go straight to your Stripe account; you pay only Stripe’s fees.
Terms / privacy: https://stripe.com/legal/ssa and https://stripe.com/privacy

Google Sheets (add-on, off by default)

Provider: Google LLC. Your server contacts oauth2.googleapis.com, sheets.googleapis.com and www.googleapis.com using a service account you create.
When: only after you enable the add-on and save the service-account credentials: when you test the connection or pick a spreadsheet or worksheet, and after each submission of a connected form (sent in the background through WP-Cron, with retries).
Data sent: a sign-in request signed with your service-account key (the key stays on your site, encrypted); the chosen spreadsheet and worksheet; and the mapped field values with their column names. Picking a spreadsheet lists those shared with the service account.
Not sent: fields you have not mapped.
Terms / privacy: https://developers.google.com/terms and https://policies.google.com/privacy

Google reCAPTCHA (add-on, off by default)

Provider: Google LLC (https://www.google.com/recaptcha/).
When: only after you enable the add-on, enter your keys and turn it on for a form. Pages with that form load https://www.google.com/recaptcha/api.js, and your server checks each submission with https://www.google.com/recaptcha/api/siteverify.
Data sent: Google’s script collects what it needs to detect bots (such as IP address, browser details and page interaction). Your server sends your secret key and the response token. No form answers are sent.
Terms / privacy: https://policies.google.com/terms and https://policies.google.com/privacy

Cloudflare Turnstile (add-on, off by default)

Provider: Cloudflare, Inc. (https://www.cloudflare.com/).
When: only after you enable the add-on, enter your keys and turn it on for a form. Pages with that form load https://challenges.cloudflare.com/turnstile/v0/api.js, and your server checks each submission with https://challenges.cloudflare.com/turnstile/v0/siteverify.
Data sent: the Turnstile script collects what it needs to detect bots (such as IP address and browser details). Your server sends your secret key and the response token. No form answers are sent.
Terms / privacy: https://www.cloudflare.com/website-terms/ and https://www.cloudflare.com/turnstile-privacy-policy/

Webhooks (off by default)

Provider: the endpoints you enter, one per webhook (for example Zapier, Make, a CRM, Meta through your own server, or any URL). Private and local network addresses are refused, also after redirects.
When: only after you add a webhook and turn it on: after each submission of a form the webhook covers (sent in the background after the page has loaded, or through WP-Cron, with up to 5 retries over about 8 hours), and when you send a test.
Data sent: with the standard data, your site address, submission time, form and submission IDs, the answers (signatures as embedded images) and the form’s field settings. With a custom JSON template, only what the template contains, which can include the visitor’s IP address, browser, page address and referrer, and (with the Ad Tracking add-on) ad click IDs, UTM parameters and the Meta _fbp/_fbc values. Fields marked “Never send to webhooks” are never sent. Every request has an X-AFB-Delivery-ID header, and an X-AFB-Signature header (HMAC-SHA256) if you set a secret. A test sends only the site address and time, or the template filled with sample values.
Terms / privacy: those of the receiving service.

Google Fonts (only for forms using a Google font)

Provider: Google LLC (https://fonts.google.com/).
When: only on pages showing a form styled with one of the Google fonts offered under Customize (some theme presets use one), or a Conversational Forms chat set to a Google font on its Appearance tab (also loaded in that tab’s preview). The default fonts (your theme’s font, or the system font for chats) load nothing.
Data sent: the browser’s font request from fonts.googleapis.com, which gives Google the visitor’s IP address and browser details. No form content is sent.
Terms / privacy: https://developers.google.com/fonts/terms and https://policies.google.com/privacy

AFB – Auto Form Builder: Drag & Drop Contact Forms, Multi-Step Forms, Conditional Logic & AI

About this plugin