Yes — your business data is kept in Australia. Biloh stores it in a data centre in Sydney and serves the app from Sydney.
Where exactly is the data?
Your records — clients, sites, jobs, invoices, the books, documents and email — are stored in Sydney, Australia (the Supabase ap-southeast-2 region) and the app is served from Sydney. Daily backups are kept for seven days.
Who can see it?
Only your business. Every business record carries your business's id, and every request — from the app or from your assistant — is tied to your business before it reads or writes anything. Row-level security in the database is a second wall on those tables, so another business, or another business's assistant, is not given your data.
What happens when I connect an assistant?
The data your assistant reads is processed by that provider — Anthropic, OpenAI or xAI — under its own terms, in your own account with them. Biloh never sends your data to a provider you have not connected yourself.
Can I take my data out, or delete it?
Yes. An owner can export everything — every list and every file, in one ZIP — from Settings → Your data. A deletion request waits out a 30-day cooling-off period you can cancel, then removes people's details and documents; only the financial records the law requires are kept.
More on Security and trust.