Data. Where it lives.
Where your inventory lives, how long we keep it, and what we encrypt. Concrete answers, not platitudes.
01 · Storage
Your ledger lives in a Postgres cluster on AWS Mumbai. The volumes are encrypted at rest with AES-256 keys managed by AWS KMS. Connections to the database are TLS 1.3 only.
Hot backups are taken every 15 minutes; daily snapshots are retained for 30 days. Backups are encrypted with the same keys and are restricted to the same region.
02 · Residency
By default, your data stays in ap-south-1 (Mumbai). EU and US regions are available on request — contact us before signing up if residency matters to your compliance team.
We do not transfer data across regions for processing. Reports, exports, and reconciliation runs all execute in your home region.
03 · Retention
Active inventory data is retained for the lifetime of your account.
Operational logs are retained for 90 days, then aggregated into anonymised metrics.
Deleted accounts are queued for purge after 30 days. Encrypted backups containing the data are destroyed within 90 days of account deletion.
04 · Encryption
At rest — AES-256 on EBS volumes; TDE on the database itself.
In transit — TLS 1.3 for all client and channel connections; mTLS between internal services.
Field level — credentials and OAuth tokens for connected channels are encrypted with envelope encryption; the data key never leaves AWS KMS.
05 · Deletion
Either call DELETE /v1/account from the API, or click 'Delete tenant' in Settings. Your tenant is soft-deleted immediately (no further reads or writes) and hard-deleted from the primary store within 30 days. Backup destruction follows within 60 further days.
06 · Subprocessors
AWS — infrastructure (compute, storage, KMS) in ap-south-1.
Stripe — billing only. Card data never touches our servers.
Sentry — error and performance telemetry; PII redacted before transmission.
Postmark — transactional email (verification, scheduled reports, billing receipts).