Here is exactly what Zolra stores, who can access it, how it is protected, and how AI processing works — in plain language, using only verified implementation facts.
What Zolra stores
Company profile: stage, sector, traction, team, financial signals
Decisions, Studio session outputs and their outcomes
Connections, messages and network activity you take part in
Account and authentication data
Access model
JWT access tokens (RS256), 15-minute TTL
Refresh tokens, 15-day TTL, httpOnly cookies, rotated on use with reuse detection
Google OAuth 2.0 sign-in supported alongside email/password
Passwords hashed with bcrypt (12 rounds, salted) — never stored in plain text
Role-based access control on admin and subscription-gated features
Storage & transmission
Hosted on AWS (ap-south-1, Mumbai)
All data encrypted in transit (TLS)
Database storage encrypted at rest (AWS RDS storage encryption)
PostgreSQL with automated backups; Redis used for caching and rate limiting
CORS restricted to approved origins
AI processing
Chat, matching, scoring and Studio tools run on AWS Bedrock (Anthropic Claude); embeddings on Amazon Titan
Authentication to Bedrock is via AWS IAM role — no API key is stored or transmitted separately
Under AWS Bedrock's standard terms, prompts and outputs sent through Bedrock are not used to train the underlying foundation models
AI processing is used to power in-product features (matching, recommendations, Studio outputs) — not shared with third parties for unrelated purposes
Retention & deletion
Data is retained while your account is active
You can request account deletion; associated personal data is removed per our Privacy Policy and the DPDP Act
Backups rotate on a defined cycle and age out deleted data along with the primary store
Compliance
Built for compliance with India's Digital Personal Data Protection Act, 2023
Explicit consent collected before data processing
See our Privacy Policy and DPDP Compliance page for the full legal detail
Vulnerability reporting
Found a security issue? We appreciate responsible disclosure. Email security@zolra.ai with a detailed description. We aim to respond within 48 hours.