Nexus Lead Suite

Nexus Lead Suite is an all-in-one WordPress lead generation, form builder, popup, and website engagement plugin for agencies, freelancers, and site owners. Capture leads, create conversion-focused forms, trigger popup campaigns, connect existing theme buttons, review visitor interactions, and send activity notifications from one central WordPress admin dashboard.

Instead of assembling separate tools for basic lead capture and on-site engagement, use Nexus Lead Suite to manage key conversion workflows in one place. Its public-facing scripts use vanilla JavaScript, and the plugin is designed to keep the front-end footprint lightweight.

Lead Capture and Form Builder

• Create lead capture forms with fields such as name, email, phone, website, address, dropdowns, radio buttons, checkboxes, dates, file uploads, terms acceptance, and more.
• Build multi-step forms with page breaks and layouts of up to four columns.
• Configure form styling, submit button text, confirmation messages, and conditional email routes.
• Add spam protection with Google reCAPTCHA or Cloudflare Turnstile when configured.
• Publish a form and embed it with the [nexulesuite_form id="FORM_ID"] shortcode.
• Review form submissions, filter records, export CSV data, and bulk-delete submissions.

Popup Builder and Conversion Triggers

• Configure popups to open after a delay, at a chosen scroll depth, on exit intent, or after a visitor clicks a connected button.
• Add a form shortcode or other supported content to a popup body.
• Preview popup layouts in desktop, tablet, and mobile frames before publishing.
• Use the Auto Popup setting to enable or disable automatic popup triggers.

Smart Buttons and Existing Theme Buttons

• Organize smart buttons into groups and configure labels, URLs, icons, styling, priorities, and display conditions.
• Connect existing theme buttons or links using Button Classes rules such as popup:, mail:, and notify:.
• Use supported button events to open a popup or trigger an activity notification without rebuilding the site’s theme buttons.

Website Analytics and Activity Reports

• Review an Activities timeline covering supported interactions such as clicks, scroll milestones, popup events, form submissions, and notification activity.
• Track phone-link and email-link clicks as separate events.
• Filter activity records and export PDF reports for client communication and internal review.
• Use the Visual Editor from the Activities area to inspect supported front-end elements and configure interaction tracking.
• Create optional, time-limited client report links and choose which supported report sections each link can access.

Email Notifications and SMTP

• Configure HTML email templates for supported activity notifications and use available merge tags.
• Send site email through the default PHP mailer, Gmail/Google Workspace OAuth, Microsoft 365/Outlook OAuth, or a custom SMTP server.
• Send a test email from the SMTP settings to check the configured delivery route.
• Connect form submissions to a webhook URL that you configure.

Accessibility, Language, and Live Chat Dock

• Add a configurable front-end dock for accessibility tools, a language switcher, live chat, and custom links.
• Adjust dock position, button order, size, spacing, offsets, and display conditions.
• When enabled, accessibility tools include options such as text resizing, contrast modes, link highlighting, reduced animation, reading support, and text-to-speech.
• Enable the language switcher to load Google Website Translator.
• Enable live chat in the dock and configure its supported header and greeting settings.

Optional AI Chatbot and Knowledge Base

• Optionally connect an AI chatbot to supported providers, or point it to a self-hosted FastAPI and Ollama server that you control.
• Train the knowledge base using supported text from published posts, pages, and products.
• Configure FAQs, a system prompt, and supported assistant tools for knowledge search and lead capture.
• AI features are disabled by default and require you to configure a provider or your own server.

Settings Export and Restore

• Export supported plugin settings and configuration into a JSON bundle.
• Restore supported configuration through the import feature.
• Optionally include supported media files in an export bundle.

Privacy, Performance, and Control

• Public-facing scripts use vanilla JavaScript rather than a front-end JavaScript framework.
• The plugin does not contact the author’s servers and does not include author telemetry.
• Third-party services are contacted only when you enable the relevant feature and configure it. Review the External services section below for details.
• Form submissions are retained for the configured retention period; by default, records older than 30 days are deleted by the daily cleanup task.
• Uninstalling the plugin preserves its data by default. You can explicitly opt in to data removal using the instructions in the Data removal section.

Nexus Lead Suite is designed for WordPress site owners who want lead generation forms, popup campaigns, visitor interaction tracking, email notifications, client activity reports, accessibility controls, and optional AI chat in one plugin.

External services

This plugin can connect to the third-party services listed below. None of them are contacted unless you explicitly enable the matching feature and enter your own credentials. With a default installation the plugin makes no outbound requests at all.

Google reCAPTCHA

When reCAPTCHA is enabled on a form, the visitor’s browser loads Google’s reCAPTCHA script and sends a response token to your WordPress site on form submit. Your server then sends that token (and your site/secret keys) to Google’s verification API to confirm the submission is not automated spam.

• Service: Google reCAPTCHA (Google LLC)
• Endpoints: https://www.google.com/recaptcha/
• Data sent: reCAPTCHA response token, site key, secret key (server-side), and the visitor IP address as required by Google’s API
• When: on page load and on form submit, only on forms where you enabled reCAPTCHA
• Terms of Service: https://policies.google.com/terms
• Privacy Policy: https://policies.google.com/privacy

Cloudflare Turnstile

When Turnstile is enabled on a form, the visitor’s browser loads Cloudflare’s Turnstile widget and sends a response token to your WordPress site on form submit. Your server then sends that token (and your site/secret keys) to Cloudflare’s siteverify endpoint to validate the submission.

• Service: Cloudflare Turnstile (Cloudflare, Inc.)
• Endpoints: https://challenges.cloudflare.com/
• Data sent: Turnstile response token, site key, secret key (server-side), and the visitor IP address as required by Cloudflare’s API
• When: on page load and on form submit, only on forms where you enabled Turnstile
• Terms of Service: https://www.cloudflare.com/website-terms/
• Privacy Policy: https://www.cloudflare.com/privacypolicy/

Google Website Translator

If you turn on the language switcher in Accessibility & Language settings, the visitor’s browser loads Google’s Website Translator widget so page text can be machine-translated. Translation is performed on Google’s servers and cannot be done locally by the plugin.

• Service: Google Website Translator (Google LLC)
• Endpoints: https://translate.google.com/translate_a/element.js
• Data sent: the page text the visitor asks to translate, plus the request metadata Google’s widget collects (IP address, user agent)
• When: only on front-end page views, and only while the language switcher setting is enabled
• Terms of Service: https://policies.google.com/terms
• Privacy Policy: https://policies.google.com/privacy

AI chat providers (optional AI Chatbot feature)

The AI Chatbot is disabled by default. If you enable it and choose a provider in Settings -> AI Chatbot, your server sends chat requests to that provider’s API using the API key you supply. The provider generates the reply and, where supported, the embedding vectors used to search your own site content; this processing cannot be performed locally by the plugin.

Data sent on each request: the visitor’s message, recent conversation turns, the system prompt you configured, and matching excerpts of your own published content. When training the knowledge base, the text of your published posts, pages and products is sent to the selected embedding provider. Requests are made only while the AI Chatbot is enabled and a provider and key are configured. No data is sent to any provider you have not selected.

You select exactly one chat provider (and optionally one embedding provider) from:

• OpenAI (OpenAI, L.L.C.) – https://api.openai.com/v1 – Terms: https://openai.com/policies/terms-of-use – Privacy: https://openai.com/policies/privacy-policy
• Anthropic Claude (Anthropic PBC) – https://api.anthropic.com/v1 – Terms: https://www.anthropic.com/legal/consumer-terms – Privacy: https://www.anthropic.com/legal/privacy
• Google Gemini (Google LLC) – https://generativelanguage.googleapis.com/v1beta – Terms: https://ai.google.dev/gemini-api/terms – Privacy: https://policies.google.com/privacy
• Groq (Groq, Inc.) – https://api.groq.com/openai/v1 – Terms: https://groq.com/terms-of-use – Privacy: https://groq.com/privacy-policy
• DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) – https://api.deepseek.com/v1 – Terms: https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html – Privacy: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html
• Mistral AI (Mistral AI SAS) – https://api.mistral.ai/v1 – Terms: https://legal.mistral.ai/terms – Privacy: https://legal.mistral.ai/terms/privacy-policy
• Together AI (Together Computer, Inc.) – https://api.together.xyz/v1 – Terms: https://www.together.ai/terms-of-service – Privacy: https://www.together.ai/privacy
• OpenRouter (OpenRouter, Inc.) – https://openrouter.ai/api/v1 – Terms: https://openrouter.ai/terms – Privacy: https://openrouter.ai/privacy
• xAI Grok (X.AI LLC) – https://api.x.ai/v1 – Terms: https://x.ai/legal/terms-of-service-enterprise – Privacy: https://x.ai/legal/privacy-policy
• Voyage AI (Voyage AI Innovations, Inc., embeddings only) – https://api.voyageai.com/v1 – Terms: https://www.voyageai.com/tos – Privacy: https://www.voyageai.com/privacy

Alternatively you may point the AI Chatbot at a self-hosted Nexus AI Server (FastAPI + Ollama) running on infrastructure you control. In that mode the plugin sends the same data only to the base URL you enter; no third party is involved.

Google Gmail / Workspace SMTP (OAuth 2.0)

If you choose the Gmail mailer in Settings -> SMTP, the plugin sends outbound site email through Google’s servers and uses Google’s OAuth 2.0 endpoints to obtain and refresh an access token with the client ID and secret you supply.

• Service: Google Gmail API / OAuth 2.0 (Google LLC)
• Endpoints: https://accounts.google.com/o/oauth2/v2/auth, https://oauth2.googleapis.com/token, https://mail.google.com/
• Data sent: your OAuth client ID and secret, authorization and refresh tokens, and the contents of the emails your site sends
• When: only while the Gmail mailer is enabled and connected
• Terms of Service: https://policies.google.com/terms
• Privacy Policy: https://policies.google.com/privacy

Microsoft 365 / Outlook SMTP (OAuth 2.0)

If you choose the Outlook mailer in Settings -> SMTP, the plugin sends outbound site email through Microsoft’s servers and uses Microsoft’s OAuth 2.0 endpoints to obtain and refresh an access token with the client ID and secret you supply.

• Service: Microsoft 365 / Outlook (Microsoft Corporation)
• Endpoints: https://login.microsoftonline.com/common/oauth2/v2.0/authorize, https://login.microsoftonline.com/common/oauth2/v2.0/token, https://outlook.office.com/
• Data sent: your OAuth client ID and secret, authorization and refresh tokens, and the contents of the emails your site sends
• When: only while the Outlook mailer is enabled and connected
• Terms of Service: https://www.microsoft.com/en-us/servicesagreement
• Privacy Policy: https://privacy.microsoft.com/privacystatement

Your own SMTP server and webhook endpoints

Any custom SMTP host, or any CRM / webhook URL you enter in the form or global settings, is an endpoint you choose and control. The plugin POSTs the sanitized form submission payload only to URLs you have entered yourself. It is your responsibility to ensure those destinations comply with your privacy policy.

The plugin does not contact the author’s servers, does not include analytics or telemetry, and does not load fonts or flag images from third-party CDNs. Language-switcher flags use local Unicode emoji. All webfonts ship inside the plugin (assets/fonts/) under the SIL Open Font License 1.1 and are served from your own site.

Source Code

The WordPress admin single-page app is distributed as a production build:

• assets/admin/js/main.js — JavaScript bundle (minified; built with Vite and React)
• assets/admin/css/main.css — compiled styles (built with Vite)

The complete human-readable source (JSX components, styles, and build configuration) is shipped inside this plugin package and is sufficient to rebuild every compiled asset without any external download:

• admin/src/ — all React/JSX components and styles
• admin/package.json — exact build dependencies
• admin/vite.config.js — build configuration

Public front-end scripts under public/js/ are already unminified.

The same source is also mirrored in the project’s public repository: https://github.com/Mostafijemon24/Nexus-Lead-Suite

To rebuild the admin assets from the source included in this package:

1. cd admin (inside the extracted plugin folder)
2. Run npm ci
3. Build for production: npm run build
4. Output is written to assets/admin/js/main.js and assets/admin/css/main.css (see admin/vite.config.js).

For local development with hot reload, run npm run dev and add define( 'nexulesuite_VITE_DEV', true ); to wp-config.php (see admin/class-admin-app.php).

Data removal

The optional uninstall cleanup removes custom tables (wp_nexulesuite_interactions, wp_nexulesuite_submissions), plugin options (forms, settings, SMTP, migrations, etc.), and transients whose names start with nexulesuite_. Uploaded media files are not deleted automatically.