Customer hosting and website hosting are separate
Microsoft Azure
Primary region: East US, United States, confirmed by Arshadify. Backup regions and provider support-access locations still require confirmation.
Azure + Sites
The arshadify.online frontend is hosted on Azure East US. Payment and enquiry APIs and records use Sites / Cloudflare D1. The preview remains on Sites. Not all processing takes place in Azure.
Your browser
Draft content stays in memory, or on your device if you enable saving, until you choose to share it. Browser synchronization or device backups are outside this site’s controls.
Support access may take place from India. A company’s location does not determine a database’s storage region. We do not claim EU-only, UK-only or US-only processing across all services.
Bookings, AI, and connected services
Cal.com separately processes calendar-load information and submitted booking details. Its provider notice and account configuration determine its processing locations. An Azure-hosted database alone does not establish the residency of an AI request, email, support session, log, backup or calendar integration.
Before a customer campaign starts, the agreed data-flow schedule must identify each recipient, processing purpose, storage and remote-access country, backup location, retention schedule, and deletion process. Unconfirmed AI, email, CRM and analytics providers must be resolved before relevant customer data is sent to them.
International transfer safeguards
Where GDPR transfer rules apply, an appropriate lawful transfer mechanism is required in addition to a lawful processing basis. Depending on the recipient and destination, this may involve an applicable adequacy decision or executed Standard Contractual Clauses, a transfer assessment, and supplementary measures where needed. UK transfers require the applicable UK mechanism.
We have not published evidence of an executed transfer schedule for every service. A provider’s certification or an Azure subscription does not automatically establish Arshadify’s compliance. Do not treat an ordinary calendar-loading choice as blanket consent to international transfers.
Request the deployment and transfer schedule, including a copy of relevant safeguards subject to appropriate redactions.
Retention and deletion
Our retention policy sets a maximum of two years from collection for ordinary customer and enquiry data, with earlier deletion where no longer needed or legally required. Automated deletion across the website database, customer systems and backups has not yet been verified. Contact us to request a reviewed deletion.
A longer period applies only where a specific legal obligation or legal claim requires it. Records retained for that reason are limited to that purpose. Minimal suppression records may be kept to honor an objection to marketing. Customer deletion schedules must also cover backups and downstream providers; the Azure backup-deletion interval is not yet confirmed.
A specific residency or shorter retention requirement must be confirmed in the written customer agreement before data is introduced. See customer data processing.
Payments, coupons, and referrals
Payment requests, customer name, email, phone, agreed prices, status, coupon rules, and referral attribution are stored in this website's Cloudflare D1 database, separate from the Azure customer environment. The exact D1 location, backup retention, and processing terms require confirmation. Self-service purchases also store your selected plan and confirmation of its purchase details. A salted IP digest and hourly request count help limit misuse; purchase counters are removed during later purchases after their roughly 24-hour window. Separate short-lived API counters expire within ten minutes and are cleared during later API calls. Only salted digests are stored for these counters, not raw IP addresses. When checkout is prepared, necessary customer and payment details are sent to Cashfree Payments.
Card details are entered on Cashfree's hosted checkout and are not collected by this website. We process payment records to administer your requested transaction and contract, prevent misuse, and meet applicable accounting duties. Referral codes can identify a referrer by email; they do not subscribe either person to marketing or send commissions.
Live requests collect real payments through Cashfree. Sandbox requests, when enabled, are clearly labeled and collect no real money. The ordinary two-year retention policy is subject to applicable accounting duties. Automated payment-record deletion and backup expiry are not yet verified; deletion requests are reviewed manually. Cashfree's own processing locations, retention, and contractual safeguards are governed by its own terms and privacy notice. Cashfree privacy notice ↗.