Operator and scope
SweepIndex is operated by Venture VD LLC, a Michigan domestic limited liability company (identification number 802557198). Contact support@venturevd.com for privacy, access, correction, export, or deletion requests. Offered only in the United States or Canada. Customers control the site content SweepIndex indexes; Venture VD processes it on their instructions under the Data Processing Addendum.
What we process and why
We process Wix site and instance identifiers used to install and bill the app; source configuration (which blog, pages, and dynamic collections are indexed, and which fields); the content of what the owner publishes — blog post titles and post text, regular page titles and URLs, the title, URL, and owner-configured fields of dynamic collection items, and, if the owner switches on store product search, Wix Stores catalog data read-only (product name, description with HTML removed, SKU, price and currency, product page URL, and main image) — copied into a search index so visitors can find it; merchant-configured synonyms and redirects; an append-only log of search queries, their result counts, and timestamps, which never includes a visitor's IP address or other visitor identity; and operational and security telemetry. Processing serves only to build and serve the search index, show index health and searches that returned nothing, prevent abuse, support customers, and operate plan entitlements.
We never index content that is not published and publicly visible. Draft, unpublished, and password-protected pages, posts, and collection items, and hidden store products, are excluded before anything is written to the index — this is a hard rule enforced in the indexing code, not a configuration option. Regular pages are indexed by title and URL only; SweepIndex does not crawl or index page body text. We do not sell indexed content or query data, use it for advertising, or use it to train generalized AI models. Indexed content is whatever the owner has already published; owners are responsible for their own notices and lawful basis for personal data appearing in their published site content.
Retention and control
Indexed content is retained and kept current while a source stays enabled, replaced automatically as the owner's published content changes and removed within one reconciliation cycle after it is unpublished or deleted. Search query logs are retained without IP addresses to power the zero-results report and are never joined to a visitor's identity. Account data — site configuration, the search index, synonyms, redirects, and query logs — is deleted within 30 days of uninstalling the app. Owners can review indexed content, synonyms, redirects, and query logs from the dashboard any time before uninstalling.
Sharing and subprocessors
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Fly.io | Hosting and network for the application and search engine | Site/instance identifiers, indexed content in transit, operational metadata | Chicago, United States |
| Fly.io (PostgreSQL database, unmanaged) | Encrypted database storage and daily snapshot backups | Site/source configuration, synonyms, redirects, query logs | Chicago, United States |
| Typesense (self-hosted by Venture VD on Fly.io) | Search index and query engine; internal-only, no public address | Indexed document content — titles, post text/excerpts, URLs, configured collection fields, product name, description, SKU, and price | Chicago, United States |
| Wix.com Ltd. | Platform, install lifecycle, billing | Instance identifiers, plan and billing state | Wix infrastructure |
Material subprocessor changes get advance notice and an objection right. No analytics or error-tracking subprocessor is enabled at launch.
Security
Database connections travel only over Fly.io's private, WireGuard-encrypted network; the database has no public address. Wix requests are signature-verified, including webhook deliveries. Widget search access uses short-lived, signed, site-bound tokens. The runtime database role cannot delete account data or modify search query logs once written; a separate restricted role performs the 30-day purge. Logs are structured and redact credentials and secrets.
Location and privacy rights
Data is processed in Fly.io's Chicago region, United States. Canadian customers' data leaves Canada and may face US lawful access; we remain accountable under PIPEDA. US state privacy laws and PIPEDA may give rights to know, access, correct, delete, or port data. We do not sell or share personal data as defined by California law. Appeal by reply, or file with a state attorney general or Canada's Office of the Privacy Commissioner.
Changes
Material changes are posted here with an updated date and, where they affect processing, emailed to administrators.