Privacy policy

Who we are

Obra is construction management and cost control software made in San Ignacio, Cayo, Belize. Obra is the controller of the personal data described here. Questions about this policy go to [email protected].

This website (obra.bz)

obra.bz uses no analytics, no cookies and no tracking of any kind. The demo form stores nothing on obra.bz: pressing “Request a demo” opens WhatsApp on your device with a message you can edit before sending. What WhatsApp, your email provider or your phone then hold is governed by their own policies, not this one.

The app (app.obra.bz)

The app holds what a customer company puts into it: estimates and bids, project budgets, costs, receipts, invoices and other documents, vendor and client names, and the names, email addresses and language preference of the people the company invites as members. It also holds sign-in data (a password hash, sign-in times) and an audit trail of who changed what, before and after, so a company can see its own history.

The company that subscribes is the account holder. Obra processes this data only to run the service that company subscribed to, to support it, and to keep the service secure.

Where the data lives

On managed cloud infrastructure in the United States (DigitalOcean, New York region), encrypted in transit and at rest, with daily backups and point-in-time recovery. Original documents are stored immutably and served through signed links that expire.

AI processing

When a member asks Obra to review a bid or read a document, the relevant plan set, lines or document are sent to Anthropic’s API under the company’s or Obra’s API key, and the result comes back as suggestions a person accepts or dismisses. Anthropic does not use API data to train its models. Nothing is sent to an AI service without a member’s action.

Who else sees it

Nobody buys or receives this data. Obra uses hosting, email and AI providers as processors to deliver the service, each under its own contract, and discloses data only when the law requires it. Obra never sells data.

How long we keep it

For the life of the subscription and 90 days after it ends, so the company can export everything. After that it is deleted, and backups containing it age out within a further 30 days. A company can ask for a full export at any time.

Your rights

A member can see, correct, export or ask for the deletion of their own personal data by writing to [email protected]. Because the company is the account holder, requests about business records go through the company’s Owner, and Obra follows the company’s instructions about its own data.

Children

Obra is a business tool and is not for anyone under 18.

Changes

If this policy changes, the new version is posted here with a new effective date, and account holders are told by email 30 days before a material change takes effect.