Comments – GraphComment | AI-Moderated Comment System

Yes. GraphComment is hosted in Europe and fully GDPR compliant. Your readers are never tracked for advertising, and users have full control over their personal data — access, modification or deletion at any time. For more information, please see our Privacy Policy. To improve the plugin, GraphComment sends an anonymous technical signal on activation, configuration and deactivation: the event type, the plugin version, your site's language and, at installation, the WordPress and PHP versions with a random installation identifier. No URL, no personal data, no IP address is transmitted. If you deactivate the plugin, a short form lets you — only if you choose to — tell us why you are leaving; nothing is sent unless you click "Send and deactivate". Your comment data remains yours: you are the data controller, GraphComment only processes an anonymous technical signal.

Yes. All core features are free with the Basic plan, up to 1M data loads per month — the system is fully functional without paying. If you need more volume or premium features, paid plans start at $29/month ($25/month billed annually). See the pricing page.

Two ways. First, structurally: spam bots post directly to WordPress's native comment submission endpoint without ever loading your pages — with GraphComment active, that endpoint is closed, so automated spam never enters your moderation queue. Second, every comment goes through GraphComment's moderation pipeline: smart filtering, insult detection, trusted-member auto-approval, and AI Moderation Assist (free for your first 100 AI analyses each month) — the AI reads the article before judging the comment and suggests a decision; you stay in control.

Export your comments from Disqus (custom XML export), then in the plugin open Importation → Import by file and upload the export. Large archives are processed in the background. Your existing WordPress comments can be imported the same way, or directly from the Importation tab.

No. Features that are often sold as paid extensions elsewhere — image uploads, extra spam protection, comment search, front-end moderation — are included in GraphComment's free plan. Spam is blocked at the source (WordPress's native comment submission endpoint is closed so bots can't post), and AI Moderation Assist is included on every plan.

No. Enable the Synchronization tab and every GraphComment comment is copied back into your WordPress database, on a schedule you choose — and instantly when the webhook push option is enabled. If you deactivate the plugin, the native WordPress comments (including everything synchronized) are displayed again.

When installing, you can select the date from which GraphComment takes over. All previous comments keep being displayed the native way. You can also import them into GraphComment so they appear in the new discussion area.

SSO lets the users of your WordPress database comment without creating a GraphComment account. WordPress SSO is included on every plan, free: enable Single sign-on (SSO) via WordPress in the plugin's Plugin Settings → General tab (or in your GraphComment dashboard), and your logged-in WordPress users are signed in to GraphComment automatically.

Yes. Product pages are excluded by default (WooCommerce manages its own reviews), and GraphComment 5.0 lets you enable comments on product pages — from the settings or with the graphcomment_should_apply filter.

Yes. GraphComment replaces the comment area on both classic and block (Full Site Editing) themes automatically, and version 5.0 adds a GraphComment block plus a [graphcomment] shortcode to place the discussion area anywhere.

Yes, you own your data. You can retrieve all comment data of your site at any time: the synchronization keeps a copy in your WordPress database, and an export tool is available in the administration of your website.

GraphComment synchronizes comments back to WordPress, and runs the comment import, using WordPress scheduled tasks (WP-Cron). On some hosts WP-Cron is disabled (define('DISABLE_WP_CRON', true); in wp-config.php) or only fires when a visitor loads a page. On a low-traffic site, the synchronization and the import may then never run. The plugin warns you in the admin when this happens, and the Diagnostic page (GraphComment menu) detects it. To fix it, set up a real system cron that triggers WordPress scheduled tasks every few minutes. Two common options:

• With WP-CLI (recommended): */5 * * * * cd /path/to/wordpress && wp cron event run --due-now > /dev/null 2>&1
• Without WP-CLI, call wp-cron.php directly: */5 * * * * wget -q -O - "https://example.com/wp-cron.php?doing_wp_cron" > /dev/null 2>&1

Open the Diagnostic page in the GraphComment menu: it runs 7 automatic health checks (API connectivity, cron, synchronization freshness, system requirements…) and a Copy report button produces a ready-to-send summary for our support team.

The plugin verifies SSL certificates on all API requests. If your server has an outdated CA certificate bundle, you may see connection errors. Ask your hosting provider to update the server's CA certificates (recommended), or as a temporary workaround add this line to your wp-config.php file: define('SSLVERIFY', false);