Policy
Where your data is stored
How the India-region commitment is implemented, what it means for you, and the one opt-in exception.
Last updated · 28 May 2026
We store and process your data in India. The Mumbai region for our database, our authentication service, our background jobs, our object storage, and our error-tracking. The only routine exception is the optional AI drafter, and that exception is opt-in and stripped of personal data — covered separately under the AI provider summary.
What this means in practice
When you create a profile, save a roadmap, or click an eligibility check, the request hits a server in India. The response is computed in India. The row that records what you did sits in a Postgres database in Mumbai. Backups stay in India. Our application logs stay in India for the 180-day retention window set by the CERT-In Directive of 2022. Our analytics — only the parts you have opted into — run on an Indian-hosted PostHog instance, never the US-region cloud version.
We do not default to US-region services. We did not pick India to optimise for cost; we picked it because the Digital Personal Data Protection Act, 2023 (DPDP Act) sets restrictions on cross-border transfer and because "your data stays in India" is a promise we want to be able to make without a footnote.
Why this matters to you
Three things you do not have to worry about because of this choice:
A foreign regulator asking us for your data has no Indian-hosted copy of your records to reach for through indirect means. Your records sit in jurisdictions Indian law governs.
A vendor migration that moves your data without telling you cannot happen quietly. Region is set per service in our infrastructure documentation; changing it requires an explicit migration and an updated privacy notice.
The trust posture is not a marketing line. If a future audit asks "where is the data," the answer is a list of services and their regions, each verifiable.
The one cross-border exception
If you opt in to the AI-assisted drafter (a Phase 2 feature for the DPIIT innovation statement), that one specific request goes to Anthropic's Claude API outside India. You decide whether to use it; we never call it without your explicit action; and we never put personal data in the prompt. The full request and response are kept in our audit log for seven years. See the AI provider summary for the longer treatment.
See also
This summary is reviewed quarterly. Last reviewed: 28 May 2026.