WATCHWICK / TRUST & TRANSPARENCY
Providers and processing locations
Updated: 9 October 2026 · Operates on Oracle Cloud (Hyderabad, India)
This register distinguishes production hosting, configured delivery, optional merchant integrations and public-website services. It describes the current architecture; it is not proof of an executed provider DPA, a completed transfer assessment, or a fixed provider retention/location guarantee.
Primary database storage is in Hyderabad, India. Provider copies, account access and support can involve other locations. Contracting entities, account settings and safeguards must be verified for the applicable relationship before making a contractual representation.
1. Current inventory
| Service | Role and data boundary |
|---|---|
| Oracle Cloud Infrastructure — production | Application, worker, primary PostgreSQL and encrypted backups in Hyderabad (ap-hyderabad-1). Verify actual contracting entity, account access and storage protections. |
| Resend — configured primary email provider | Staff recipient email and operational alert/digest contents. Configuration is not proof of successful delivery or a verified retention period. |
| Postmark — optional supported provider | A source-supported email alternative; not the currently configured production delivery service. List as active only if actually enabled. |
| Slack — merchant-authorized optional integration | Workspace/channel details, encrypted bot credentials and operational notification content. Delivered messages follow workspace/provider controls. |
| Google Analytics — optional website analytics | Loaded only after visitor opt-in. Analytics cookies, page/event and device/browser/network data; separate from the merchant application. |
| Cal.com — requested booking service | Calendar loads after a visitor chooses to load it; booking/contact details are handled under Cal.com's terms and account settings. |
| Google Workspace — correspondence | Owner-confirmed email service for business, support, privacy, security and legal correspondence. |
| Spaceship — registrar/DNS | Registrar/DNS infrastructure. It is not a Shopify-store-data integration; clarify any additional purchased/resold service separately. |
| Shopify — upstream platform | Store authorization, commerce records, billing and privacy request source. Shopify has its own platform relationship with the merchant. |
2. Contracts, locations and changes
A provider's precise controller/processor role depends on its service and agreement. Website/business providers should not all be described as store-data subprocessors. Review actual terms, data processing addenda, retention, access locations and transfer mechanisms for the relevant use.
Where a merchant agreement requires advance notice of a provider change, Watchwick must follow that agreed process. This register does not claim a notice workflow or signed agreement that has not been verified. Material changes will be reflected in its revision date. Contact legal@watchwick.com for the applicable arrangement; privacy requests go to privacy@watchwick.com.