Privacy Policy
Last updated October 19, 2026
1. Who we are
SiteVault backs up, monitors and reports on Webflow sites for agencies. It is built and run by Sandcastle Interactive LLC (“we”, “us”). This policy explains what SiteVault collects when you connect it to Webflow, why, where it is kept and when it is deleted. SiteVault is an independent product and is not made or endorsed by Webflow. Questions: support@sandcastle-web.com.
2. What SiteVault collects
- Your Webflow connection. The access token Webflow issues when you authorize SiteVault, the permissions (scopes) it carries, your Workspace and authorization ids, and the email address of the person who connected. The token is encrypted (AES-256-GCM) before it is stored, is only ever used on our servers, and is never shown to anyone.
- The content we back up. For each site you protect: its name and domains; the structure of every CMS collection and every CMS item in every locale, with a new version each time an item changes; page settings (titles, slugs, SEO and Open Graph fields); and copies of asset files and of files used in CMS fields.
- Monitoring results. What our checks of your published pages find: status codes, response times, SSL certificate dates, page titles, links and similar details, and the alerts raised from them.
- Form activity. The number of submissions per form per day. Webflow sends us each submission as it happens; we keep only the form’s name and the count, and never store what visitors typed.
- Settings you enter. Alert recipients, client names, client report recipients, and your agency branding (name, logo address, colour and contact email).
- Billing. Payments are handled by Stripe. We store your Stripe customer and subscription ids, your plan, and the subscription’s status. Card details go straight to Stripe and never reach us.
- Operational logs and error reports. Records of jobs and errors (for example “backup of site X took N seconds”), used to keep the service running. When something fails, an error report with technical details (the page or job, ids and the error) goes to Sentry. Error reports don’t include your backed-up content, IP addresses or cookies.
SiteVault sets one cookie, to keep you signed in. It uses no analytics or advertising trackers, and it does not read your sites’ ecommerce orders, membership users or form submission contents.
3. How we use it
Only to provide SiteVault: to make and store backups, show you history and run the restores you approve, check your sites and send you alerts, build the client reports you ask for, bill you, answer support requests and keep the service secure and working. We do not sell or rent any data, and we do not use it for advertising or to train AI models.
4. Your sites’ content and your clients
Your Webflow sites can contain personal information, such as names in a team collection or a client’s contact details. For that content we act as your processor: we store and use it only to provide SiteVault to you, under your instructions. You are responsible for having the right to back it up with us. If you need a data processing agreement, email support@sandcastle-web.com.
Client reports are web pages reached by an unguessable link. Anyone who has the link can open the report, so share it only with the people it is meant for. Report pages tell search engines not to index them. Report emails go only to the recipients you enter, and only when you turn monthly reports on or click Send.
5. Who else processes it
| Provider | What for | Where |
|---|---|---|
| Webflow | The platform your sites run on, and the source of everything we back up | United States |
| Fly.io | Runs the SiteVault app and its background jobs | United States (Virginia) |
| Neon | Database: your account, settings, version history and monitoring results | United States (US East) |
| Cloudflare R2 | Storage for backed-up content and files | Western North America |
| Amazon Web Services (SES) | Sends alert, report and account emails | United States |
| Stripe | Subscriptions, payments, invoices and sales tax | United States |
| Sentry | Error reports and performance data, so we can find and fix problems | United States |
We will update this list before adding a provider that handles your data.
6. Where it is processed
Sandcastle Interactive LLC is based in the United States, and all of the above store and process data in the United States or North America. If you connect sites from the European Economic Area, the United Kingdom or Switzerland, their data is transferred to the United States. Contact us if you need additional transfer terms.
7. Security
Everything travels over HTTPS. Our providers encrypt stored data, and Webflow tokens are encrypted again by SiteVault before they are saved. Webhooks from Webflow and Stripe are accepted only with a valid signature. Access to production systems is limited to Sandcastle Interactive LLC staff who need it to run the service.
8. How long we keep it
- While your account is active (Webflow connected, and a trial or subscription in good standing), we keep your backups and their full version history, including for sites you have switched off.
- If you remove SiteVault from Webflow, or Webflow stops accepting its token, we stop using the token and delete it straight away, and stop backing up and billing those sites.
- If you remove SiteVault, or your trial or subscription ends, we keep your data for 30 days so you can come back, email you 7 days before it is deleted, and then permanently delete it: backups, version history, restores, alerts, monitoring results and client reports. Coming back before then cancels the deletion.
- If a single site stops being shared with SiteVault (for example, it moves to a client’s Workspace), we stop backing it up and billing for it, and delete its data 30 days later unless it is shared again.
- Delete now. You can delete your account and all its data at any time from Settings in SiteVault. This disconnects SiteVault from Webflow and ends your subscription immediately.
- Other records. Raw webhook deliveries are kept for 30 days for troubleshooting. Operational logs are kept for a few days, and error reports for up to 90 days. Our database provider keeps point-in-time recovery history, so deleted records can remain there for up to 7 days before they are gone for good. Stripe keeps invoices and payment records as tax law requires.
After deletion we keep only what is needed to recognise a returning agency (account and Workspace ids, and trial and subscription dates). Names, email addresses and branding are removed.
9. Your rights
Depending on where you are, you may have the right to access, correct, export or delete the data we hold about you, or to object to how it is used. Email support@sandcastle-web.com from the address on your account and we will respond within 30 days. You can also delete everything yourself from Settings at any time.
10. Children
SiteVault is a business service for agencies and is not directed at children under 16.
11. Changes
If we change this policy, we will update the date above. If a change materially affects how your data is handled, we will email the account contact before it takes effect.
12. Contact
Sandcastle Interactive LLC, support@sandcastle-web.com.