1. Scope
This policy explains how ObraMate ("we") handles personal information when you visit our website, create a workspace or use the Service. Information that our customers enter about their own clients, leads and employees ("Customer Data") is processed on the customer's behalf under our Data Processing Addendum; for that information the customer decides what is collected and why, and requests about it should go to that company first.
2. Information we collect
We collect:
- Account information: name, work e-mail, phone, company name and password (stored only as a secure hash).
- Billing information: plan, invoices and payment status. Card details are collected and stored by Stripe, not by us.
- Usage and device information: IP address, browser and device type, pages used, sign-in times and error logs, used to keep the Service secure and working.
- Support messages you send us.
- Location and photos only when you or your Users choose to attach them (for example job photos with GPS or a scanned receipt).
3. How we use it
We use personal information to:
- create and run your workspace and provide the features you use;
- send service e-mails such as sign-up confirmation, password resets, trial and billing notices and security alerts;
- process payments and keep billing records;
- provide support, prevent fraud and abuse, and keep the Service secure;
- understand overall usage so we can improve the product.
4. What we do not do
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use Customer Data to market to your clients.
5. Service providers
We share information only with providers that help us run the Service, under contracts that limit their use of it, when required by law, or as part of a merger or acquisition with notice to you. Our current providers are:
- Railway — Application hosting and database (United States)
- S3-compatible object storage — Photos, documents and file storage (United States)
- Resend — Transactional e-mail delivery (United States)
- Stripe — Subscription billing and card payments (United States)
- Google Maps Platform — Address lookup, geocoding and maps (United States)
- OpenAI — Reading receipts and photos you choose to scan (United States)
6. Security
Data is encrypted in transit (HTTPS). Each customer's data is isolated in the database, passwords are hashed, staff access to the platform requires two-factor authentication and is logged, and backups are taken regularly. No system is perfectly secure; if a breach affects your personal information we will notify you as required by law.
7. Retention
We keep account information while your workspace exists. After a workspace is closed, data is kept for up to 90 days so it can be restored on request and then deleted from active systems; backups are overwritten on their normal schedule. Billing records are kept as long as tax and accounting laws require.
8. Your choices and rights
You can view and update your account information in the app. Depending on where you live (for example California or Colorado), you may have the right to know, access, correct, delete or obtain a copy of your personal information and to opt out of certain processing. To make a request, e-mail support@obramate.com. We will verify the request and respond within the time required by law, and we will not discriminate against you for exercising these rights.
9. Cookies
We use cookies that are necessary to keep you signed in and protect your account, and local storage on your device to remember preferences such as filters. We do not use third-party advertising cookies.
10. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.
11. Changes and contact
We will post updates on this page with a new effective date and notify workspace administrators of material changes.
Contact: support@obramate.com.
Questions? Write to support@obramate.com.