Parties and roles
You, the customer, are the controller for the data your account holds. Voyage Studios LLC is the processor, acting only on your instructions to run Sitearc.
Form data
Form responses can include the field values you choose to collect. Sitearc also stores form settings, destinations, delivery attempts, timestamps and provider status. Webhook destinations receive submissions only when configured.
Subprocessors
These subprocessors act on our behalf. Cloudflare hosts the application, its storage and page rendering. Neon hosts the database. Railway runs page capture for feedback reviews. Resend sends service email. Stripe processes payments. DataForSEO runs search research. Google provides sign-in, and the Search Console and Analytics APIs you authorise. Each one processes only what its role in Sitearc requires.
Security measures
Connected site credentials are encrypted at rest. Access to customer data is role-based and limited to what a task requires. We erase data on request, other than what the law requires us to keep.
Retention operations
Form responses are kept for 30 days. Exports, backups, logs and recipient systems have separate retention.
Duration
This addendum lasts as long as your account is active. After that, we may still hold data for the period set out in our privacy policy.
A signed copy
Ask us and we will send a signed copy for your records.
Questions or requests: support@sitearc.ai.