Your data is as safe as the security policies you have in place. The data remains on your server, in your environment and network.
DotActiv won't copy anything off your server unless DotActiv has asked for a local backup for its developers to diagnose a problem.
Even then, DotActiv uses the data to develop a fix for a problem. After that, DotActiv discards the data.