Data Storage Policy

Summary

This Data Storage Policy explains where OorjaMan stores personal data and related Platform records for the live (production) service. It complements the Privacy & Data Protection Policy (/legal/privacy-policy) and the Data Processing Notice (/legal/data-processing).

OORJA MAN LLP is responsible for determining the purposes and means of processing customer Platform data, subject to applicable Indian law including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as applicable.

Primary storage location (production)

Production Platform data is hosted with our cloud infrastructure provider Supabase in India, in the Mumbai region (Amazon Web Services region ap-south-1).

This includes, without limitation: account and profile records; booking and AMC / subscription records; service and settlement records; in-app notification and support records; and files stored in our production storage buckets (for example job and site photographs), subject to retention and deletion rules in the Privacy Policy.

What is stored where

• Primary application database and authentication for production: Supabase project hosted in Mumbai, India.
• Object / file storage for production media and documents: Supabase Storage in the same production project (India / Mumbai).
• Serverless functions that support the Platform: deployed against the same production project.
• Non-production / staging environments (if used): may be hosted in other regions for testing only and are not the system of record for live customer service.

Security of stored data

We use encrypted transport (HTTPS/TLS) for Platform traffic; access-controlled storage buckets (including private buckets for sensitive job evidence); and role-based database access controls (including Row Level Security) designed so users and partners only reach data they are authorised to see.

Further security and retention detail: Privacy Policy Sections 11–15 and /legal/account-deletion.

Other providers that may receive data

To operate the Platform we use subprocessors such as payment processors, mapping / geocoding providers, push-notification networks (for example Apple APNs and Google FCM, including through Expo where applicable), and other technical providers. Those providers may process limited data as needed to deliver their service, and some may operate infrastructure outside India.

Current categories and more detail: /legal/data-processing. We do not sell personal data.

Transfers outside India

While our primary production database and file storage are in India (Mumbai), limited personal data may be processed outside India by certain third-party providers (for example global push or mapping networks). Where such processing occurs, we will take measures required under applicable Indian law.

Changes

If we change the primary production hosting region or material storage arrangements, we will update this Policy (and related notices) and revise the Last Updated date. Material changes may also be communicated through the Platform or website where appropriate.

Contact

Questions about data storage or privacy: privacy@oorjaman.com. Support: support@oorjaman.com. Grievances: /legal/grievance-redressal.