Legal · draft
Data processing agreement
Draft of 2026-10-22, prepared for review. Not in effect.
This agreement applies when a customer (“you”, the controller) uses UpVoiced (“we”, the processor) to process personal data of its end users. It forms part of theterms of service. [Counsel to review against GDPR Article 28 and the LGPD, and to decide whether the EU Standard Contractual Clauses are attached.]
1. Subject matter and duration
We process end-user personal data to run your feedback board, roadmap, changelog, widget and emails, for as long as your workspace exists and for up to 30 days after you delete it.
2. Data and people concerned
- People: your end users who sign in, post, vote, comment or subscribe.
- Data: email address, name and avatar if provided, attributes you send through single sign-on, the content they submit, and a salted hash of their IP address for 30 days.
- No special categories of data are expected; do not send them through single sign-on.
3. Our obligations
- Process the data only on your documented instructions, which are these terms and your settings in UpVoiced.
- Make sure the people who can access it are bound by confidentiality.
- Apply the security measures described on our security page.
- Help you answer data-subject requests. End users can already export and delete their own data from the profile page of your board.
- Tell you without undue delay, and in any case within [hours — to confirm], after we become aware of a personal data breach affecting your data.
- Delete the data when the workspace is deleted, after the 30-day recovery window.
- Give you the information you need to show compliance. [Audit terms to confirm.]
4. Sub-processors
You authorise the sub-processors below. We will give notice of a new sub-processor on thesub-processor page [notice period to confirm] before it receives your data, and you may object.
| Provider | What for | Data | Location | Status |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting of the portal, widget, dashboard and website; content delivery; DNS; storage of uploaded images and logos | All content served or uploaded, request metadata including IP addresses | Global network; storage location [to confirm] | In use |
| [Server hosting provider — to confirm] | Servers that run the UpVoiced API, background jobs and database | All workspace and end-user data stored by UpVoiced | Helsinki, Finland (EU) [production location to confirm] | In use |
| Clerk, Inc. | Sign-in and accounts for workspace team members (not for your end users) | Team members’ names, email addresses and sign-in data | United States | In use |
| Resend (Plus Five Five, Inc.) | Sending sign-in codes, notifications and update emails | Recipient email addresses and email content | United States | In use |
| PostHog, Inc. | Product analytics for the dashboard and this website; never on portals or the widget | Pseudonymous identifiers and usage events, without IP addresses or location | United States | In use |
| Ahrefs Pte. Ltd. (Ahrefs Web Analytics) | Cookieless visit counts for this website only (upvoiced.com); never on portals, the widget or the dashboard | Page path and campaign tags, page title, referring page, screen size and browser language; the IP address and browser type, which Ahrefs uses for country/city and a daily-salted visitor count and states it does not store | Singapore (company); processing location [to confirm] | Planned, no data yet |
| Grafana Labs | Operational monitoring: error logs and request traces | Technical logs; URLs, query strings, client addresses and user fields are removed first | [to confirm] | In use |
| Paddle.com Market Limited | Reseller and merchant of record for paid plans: checkout, payments, invoices and tax | Billing contact, payment and tax details (collected directly by Paddle) | United Kingdom | Planned, no data yet |
| Anthropic, PBC | AI suggestions such as triage and changelog drafts (switched off today) | Post and changelog text, with names and email addresses removed | United States | Planned, no data yet |
| Google LLC (Places API) | Importing public reviews as testimonials (not built yet) | Business names and public review text | United States | Planned, no data yet |
5. International transfers
[Transfer mechanism per sub-processor — to confirm.]
6. Contact
[Data protection contact — to confirm.]