Hosting & Data Location Statement — OpsTrove

Draft v1 · Effective date: October 3, 2026 · Pending qualified legal review

This statement describes where OpsTrove (including WaterTrove) stores and processes data, in plain terms. It supplements our Privacy Policy.

Primary hosting

• The OpsTrove application and its primary database are hosted on Railway in the Southeast Asia (Singapore) region.
• All traffic is served over HTTPS only, with TLS 1.2 or higher required; older protocol versions are refused.
• Web traffic passes through Cloudflare (DNS, content delivery, TLS termination, and web application firewall) before reaching our servers.

Backups

• The database is backed up daily, automatically.
• Backups are compressed and encrypted with AES-256-GCM before leaving the database host, then stored in Cloudflare R2 object storage.
• Backups are retained for 30 days and then permanently deleted.
• Backup restoration is tested as part of our pre-launch security program.

Tenant isolation

• OpsTrove is a multi-tenant platform: each subscriber's data is isolated from every other subscriber by database-enforced row-level security policies, in addition to application-level authorization checks.

Subprocessors

Infrastructure and service providers involved in storing or processing data are listed in the Subprocessors table in our Privacy Policy, Section 6 (Railway, Cloudflare, Resend, Sentry, Better Stack, and Meta/WhatsApp only where a subscriber enables that channel).

Your own copies

Subscribers can export their business data at any time from within the Service, and for 30 days after a subscription ends. We recommend keeping your own periodic exports as good practice; our backups are a platform safeguard, not a substitute for your records.

Questions

[email protected] · Muhammad Usman Akhtar, House # 2E, Block Y, Satellite Town, Bahawalpur, Punjab, Pakistan

Report a security issue: [email protected]