OptinBridge CRM – Consent & Contact Manager

OptinBridge CRM – Consent & Contact Manager helps WordPress site owners collect voluntary registrations, organize contacts and keep an auditable history of consent for communications intended for WhatsApp.

The Community edition does not scrape groups, discover private phone numbers or send messages automatically. It focuses on consent capture, contact governance, segmentation, export/import and privacy workflows.

Highlights

• Public opt-in form with explicit unchecked consent checkbox.
• Public unsubscribe form.
• Consent Passport: auditable timeline of consent creation, renewal, revocation, blocking and related events.
• Duplicate prevention using normalized phone numbers.
• Administrative blocking that cannot be bypassed by a new public signup.
• Safe unblock flow: blocked → pending → new explicit opt-in → authorized.
• Groups, tags and saved campaign segments.
• Campaign audience preview and filtered CSV export.
• CSV import with preview, legal-origin confirmation and duplicate handling.
• Dashboard, logs and environment diagnostics.
• WordPress personal-data exporter and eraser integration.
• Individual anonymization and deletion tools.
• Gutenberg block and shortcodes.
• Authenticated REST API for authorized administrators.
• No mandatory external libraries or services.
• No built-in telemetry.

What this plugin does NOT do

• It does not access WhatsApp groups.
• It does not scrape or extract group participants.
• It does not discover private phone numbers.
• It does not collect contacts silently.
• It does not use unofficial WhatsApp Web automation.
• It does not send messages automatically in the Community edition.
• It does not guarantee legal compliance by itself.

The site operator remains responsible for choosing an appropriate legal basis, wording notices, defining retention, handling data-subject requests and using exported data appropriately.

Shortcodes

[optinbridge_consent_form]

Displays the public registration form.

[optinbridge_consent_form group="group-slug"]

Displays the registration form tied to one active group.

[optinbridge_unsubscribe_form]

Displays the public unsubscribe form.

[optinbridge_support_form]

Displays the native public support/feedback form. Configure the destination e-mail in OptinBridge CRM > Configurações.

Blocks

The plugin registers a dynamic Gutenberg consent-form block. Existing shortcode integrations remain supported for backward compatibility.

Consent Passport

Each contact can keep an auditable event history, including events such as:

• consent_created
• consent_renewed
• consent_revoked
• contact_blocked
• blocked_signup_attempt
• contact_unblocked
• contact_anonymized

Internal event codes remain stable for integrations while the WordPress admin displays friendly labels.

Contact statuses

• authorized — has an active recorded opt-in.
• cancelled — the contact revoked/cancelled communications.
• blocked — administratively blocked and cannot reactivate through the public form.
• pending — not currently authorized; may become authorized after a new explicit public opt-in.

Cancelled and blocked contacts must not be treated as authorized recipients.

Groups, Tags and Campaigns

Groups represent a primary campaign/source. Tags provide additional segmentation. Campaigns are saved audience definitions based on status, group and tag.

Campaigns do not send messages. They can preview the current audience, open filtered contacts and export a protected CSV for an authorized administrator.

CSV Import

Preferred columns:

nome;telefone;email;grupo;consentimento

Example:

Maria Silva;51999999999;[email protected];promocoes;sim

Comma-separated files are also detected when possible.

The importer:

• rejects rows without affirmative consent;
• validates and normalizes phone numbers;
• avoids duplicates;
• can create a missing group;
• shows a preview before import;
• requires an administrative legal-origin confirmation;
• reports imported, updated and rejected rows;
• does not send any message after import;
• does not reactivate administratively blocked contacts.

CSV Export

Exports require an authorized WordPress user and a valid nonce. Spreadsheet-formula prefixes are neutralized to reduce CSV Injection risk.

Campaign audience export includes only the contacts matching that campaign’s saved filters at export time.

REST API

Administrative read endpoints are available under /wp-json/optinbridge-crm/v1/ for backward compatibility.

Current routes include:

• GET /contacts
• GET /groups
• GET /contacts/{id}/consent-events

These routes may expose personal data and therefore require an authenticated WordPress user with the configured CRM management capability.

Privacy

Depending on configuration and use, the plugin may store:

• name;
• phone number;
• optional email;
• group and tags;
• consent text and version;
• consent date/time;
• consent IP address;
• source URL;
• status;
• audit events.

The plugin integrates with WordPress’ personal-data exporter and eraser when an email address is available. Contacts without email can be handled from the CRM administration screens.

The plugin also supplies suggested privacy-policy text through WordPress’ privacy-policy helper.

IP capture uses REMOTE_ADDR. The plugin does not trust HTTP_X_FORWARDED_FOR by default because that header can be spoofed when proxy trust is not explicitly configured.

No plugin-owned telemetry is enabled, and the Community edition makes no mandatory external HTTP requests.

Retention

The retention-days setting is a governance reference. Version 1.5.5 does not automatically delete records solely because that period has elapsed. Administrators should apply a retention policy appropriate to their context.

Uninstall

Data is preserved by default.

If the administrator explicitly enables delete data on uninstall, uninstall.php removes the plugin tables and stored options. Public WordPress pages created by the setup wizard are not deleted automatically.

Security

The plugin uses WordPress security primitives including capabilities, nonces, sanitization, escaping, prepared queries, ID validation, CSRF protection, honeypot protection, IP rate limiting and CSV Injection mitigation.

Please see SECURITY.md in the package for responsible disclosure guidance.

Developer Hooks

Actions include:

• optinbridge_contact_created
• optinbridge_contact_updated
• optinbridge_consent_event_recorded

Filters include:

• optinbridge_consent_text
• optinbridge_consent_version
• optinbridge_integration_providers

Version 1.5.5 uses the OptinBridge-prefixed PHP API, options and database tables. A one-time migration preserves data created by earlier development builds. The public API, REST namespace and shortcodes use the OptinBridge-specific prefix to avoid naming collisions.

External services

The Community edition does not require or call an external service to provide its core features. It contains no real WhatsApp API tokens and no fabricated API endpoints.

Future messaging integrations should be distributed separately and use official provider APIs and terms.

Trademark notice

WhatsApp is a trademark of Meta Platforms, Inc. OptinBridge CRM – Consent & Contact Manager is an independent project and is not affiliated with, endorsed by or sponsored by Meta Platforms, Inc. or WhatsApp.