Backup and Recovery Policy

1. Purpose

This Backup and Recovery Policy ("Policy") describes how Ollify LLC ("Ollify," "we," "us," or "our") protects Customer Data against loss. Ollify is an early-stage company and this Policy is written to accurately reflect our current practices, not aspirational claims. This Policy is updated as our infrastructure and team grow, consistent with Section 5 below.

2. Current Backup Practices

The Ollify platform is hosted on Amazon Web Services (AWS). Ollify currently maintains:

• Automated daily backups (snapshots) of the production database

• Backups encrypted at rest consistent with the encryption standards described in Ollify's Information Security Policy

• Backup access restricted to authorized personnel with multi-factor authentication required

As an early-stage company, Ollify's backup infrastructure is currently single-region. Cross-region replication and extended point-in-time recovery are on our infrastructure roadmap and will be reflected in this Policy as they are implemented — see Section 5.

3. Recovery Approach

In the event of a data loss event affecting the production database, Ollify's recovery process involves restoring the most recent available automated backup to a new database instance, validating data integrity, and restoring service. Because this process is currently manual rather than automated, Ollify does not currently publish a guaranteed recovery time commitment. Customers with specific recovery time requirements should contact security@ollify.app to discuss current capabilities before relying on the Service for time-critical operations.

4. What This Means for You Today

5. Infrastructure Roadmap

Ollify is actively improving its backup and recovery capabilities as the company scales. Planned near-term improvements include:

• Cross-region backup replication to protect against regional AWS outages

• Extended point-in-time database recovery

• Regular, documented backup restoration testing

• Formalized recovery time commitments published in Ollify's Service Level Agreement (SLA)

This Policy will be updated to reflect each capability once it has been implemented and verified. Customers interested in Ollify's current infrastructure roadmap or specific compliance requirements (e.g., for SOC 2 vendor assessments) are welcome to contact security@ollify.app.

6. Customer Responsibilities

Given Ollify's current stage, customers with business-critical or compliance-sensitive data should:

• Maintain their own independent copies or exports of critical data outside the Ollify platform

• Regularly export Customer Data using Ollify's data export tools as a personal backup practice

• Promptly report suspected data loss or corruption to support@ollify.app

• Contact Ollify directly to discuss specific recovery time or compliance requirements before relying on the Service for mission-critical, time-sensitive operations

7. Contact