Where your data lives. Who processes it. How we keep it safe.
Everything we'd send to your legal team — public, up to date, honest.
All primary data stays in the EU
- Application + database — Hetzner Cloud CCX23 in Falkenstein, Germany.
- PostgreSQL 15.4 running on the same VM, inside a private Docker network.
- Article images — AWS S3 bucket
unlimitedvisitorsin eu-north-1 (Stockholm).
Who processes your data
| Vendor | Purpose |
|---|---|
| OpenAI | Content generation · zero-retention API |
| Anthropic | Content generation · zero-retention API |
| Stripe | Payments · PCI-DSS Level 1 |
| AWS S3 | Image hosting · eu-north-1 (Stockholm) |
| Cloudflare | CDN / DNS / DDoS protection |
| OAuth sign-in | |
| Sentry | Error tracking |
Nightly, encrypted, off-site
- Nightly
pg_dumptos3://unlimitedvisitors-backups/db/at 03:00 UTC. - Monthly restore drill on the 1st at 04:00 UTC — we actually run the recovery.
- Host-level cron —
/etc/cron.d/uv-backupanduv-restore-drill.
HTTPS on every domain — including yours
- Caddy terminates TLS at the origin.
- Let's Encrypt wildcard for
*.unlimitedvisitors.iovia Cloudflare DNS-01. - On-demand LE certificates for customer-owned CNAMEd domains — you bring the domain, we issue and rotate the cert.
We act as a processor
Under GDPR Article 28, UnlimitedVisitors acts as a data processor for the content you generate and the account metadata we hold. You remain the data controller.
A Data Processing Agreement (DPA) is available on request — email contact@unlimitedvisitors.io and we'll send you a signable version within 24h.
One email. Real human. < 24h.
Security or data-incident contact: contact@unlimitedvisitors.io.
Target acknowledgement: under 24h. We'll confirm scope, impact, and next steps in that first reply — no PR-filtered auto-response.
No SOC 2 yet — and we won't pretend otherwise.
We're a solo-founder SaaS. We're transparent about what we have and what we don't have: Stripe, Hetzner, AWS, OpenAI, and Anthropic each handle their own audited posture (SOC 2, ISO 27001, PCI-DSS where relevant). UV itself does not hold a SOC 2 Type II report yet. If your procurement process requires one before onboarding a vendor, we're not the right fit today — and we'd rather say that upfront than waste your legal team's time.
Start generating SEO-ready articles today
Daily article generation, internal linking, schema markup, and auto-publishing — all included. Cancel anytime, no setup fees, no long-term contract.