Legal
Data processing addendum
Effective date: September 6, 2026.
This addendum sits alongside our terms and our privacy policy. It sets out how Voyage Studios LLC processes data for a customer using Sitearc.
Parties and roles
You, the customer, are the controller for the data your account holds. Voyage Studios LLC is the processor, acting only on your instructions to run Sitearc.
Form data
When forms are enabled, responses can include submitted field values you choose to collect. Sitearc also stores form settings, destinations, delivery attempts, timestamps, and provider status. Webhook destinations receive submissions only when configured.
Subprocessors
Cloudflare, Neon, Anthropic, DataForSEO, Google, PostHog, and Vercel act as subprocessors on our behalf. Stripe and Loops process data only when related billing or email features are enabled. Each one processes only what its role in Sitearc requires.
Security measures
Connected site credentials are encrypted at rest. Access to customer data is role-based and limited to what a task requires. We erase data on request, other than what the law requires us to keep.
Retention operations
Form retention applies when forms are enabled. Exports, backups, logs, and recipient systems have separate retention.
Self-hosted deployments
Self-hosted operators control their own infrastructure, provider accounts, recipients, backups, jobs, and retention operations. They are responsible for their own operational setup.
Duration
This addendum lasts as long as your account is active. After that, we may still hold data for the period set out in our privacy policy.
A signed copy
Ask us and we will send a signed copy for your records.
Questions or requests: support@sitearc.ai.