This policy explains how Obra Tech LLC handles information about contractors, prospects, customers, and visitors to Provider's own website, checkout, support, and sales systems. It does not replace the privacy policy shown on each contractor website for homeowner inquiries.
Who we are
This website is operated by Obra Tech LLC, a California limited liability company.
Privacy contact: support@obraup.com
What we collect
From contractors and prospects:
- name, business name, contractor license number, trade classification, phone number, email address, business address, service area, website, and public profile links
- billing, subscription, and checkout details handled through Stripe
- support, sales, legal, privacy, and cancellation communications
- content, images, credentials, and other materials you submit or approve for your website
- acceptance records, including timestamp, IP address, user agent, order summary, recurring-payment terms, document versions, and document hashes
From public sources:
- business listing information, license information, review-platform profile information, public website content, and other public business data used for prospecting, preview creation, verification, or sales research
From use of Provider systems:
- technical logs such as IP address, device/browser information, pages viewed, actions taken, errors, and security events
- AI-editor prompts, outputs, approvals, and resulting site changes if your Plan includes the AI editor
Do not send Provider sensitive personal information, customer financial information, health information, government identifiers, or confidential homeowner information unless Provider specifically asks for it in writing.
Why we use it
Provider uses this information to:
- sell, build, host, maintain, support, and improve contractor websites
- verify contractor identity, license status, credentials, billing status, and assent to legal terms
- process payments, renewals, cancellations, refunds, and disputes
- deliver leads and service communications
- respond to support, legal, privacy, security, and takedown requests
- create and manage preview sites and outreach suppression lists
- detect abuse, debug systems, secure infrastructure, and preserve evidence
- send marketing communications where lawful, with opt-out where required
- comply with law and enforce Provider's agreements
Who handles it
Provider may disclose information to service providers that help operate the business, including hosting, email delivery, payment processing, domain/DNS, analytics if enabled, SMS if enabled, AI tooling if enabled, security, legal, accounting, and business operations providers.
Current core providers include Vercel, Resend, Stripe, Cloudflare, Google Maps where embedded, Twilio only where SMS is enabled, and Anthropic or another AI provider only where AI features are enabled.
Provider may also disclose information if required by law, valid legal process, to protect rights or safety, to enforce agreements, or in connection with a business transfer.
Provider does not sell contractor or homeowner personal information and does not share it for cross-context behavioral advertising unless this policy is updated and any required opt-out mechanism is provided.
Marketing and outreach
Marketing email from Provider will include an unsubscribe method where required. Provider will honor marketing opt-outs as required by law.
Provider's default rule is no cold SMS. SMS marketing should be sent only after a prospect or customer has opted in, replied, requested text follow-up, or otherwise created a defensible consent record.
Text messages
When you give Provider a mobile number and consent, Provider uses it to send verification codes, account and service messages, lead alerts if enabled, and marketing only if you opted in. Provider records your consent (what you agreed to, when, and from where) and your opt-outs. Provider does not sell phone numbers, and does not share phone numbers or text-messaging consent with third parties for their own marketing. Messaging providers such as Twilio handle numbers only to deliver the texts. Reply STOP to opt out. Full details are in the SMS Terms.
Retention
Provider keeps information as long as reasonably needed for the purposes above, including operating the Services, maintaining business records, preserving click-wrap evidence, handling disputes, complying with law, and enforcing agreements.
Provider may keep legal, billing, tax, security, consent, suppression, takedown, and contract records longer than ordinary support or marketing records.
Planned retention periods:
| Record | Kept for |
|---|---|
| Acceptance records, signed terms, order forms | Length of the relationship plus 4 years |
| Billing and tax records | 7 years |
| Opt-out and suppression lists | As long as needed to honor the opt-out |
| Text-message consent records | 4 years after the last message or opt-out |
| Verification codes | Deleted shortly after use or expiry |
| Preview sites and prospect research for people who never buy | Up to 90 days after the preview expires, unless on a suppression list |
| Support and sales communications | 3 years after the relationship ends |
| Server and security logs | Up to 12 months |
| Contractor content after cancellation | Export available 30 days, then deleted (see the MSA) |
California privacy requests
Some California privacy laws apply only to businesses that meet specific thresholds. If the California Consumer Privacy Act applies to Provider for your request, Provider will respond as required by that law. Otherwise, Provider may still honor reasonable access, deletion, correction, or opt-out requests where practical and not inconsistent with legal, security, contract, or business-record needs.
To make a request, email support@obraup.com with the subject "Privacy Request." Provider may verify your identity and authority before responding.
Security
Provider uses reasonable administrative, technical, and organizational measures appropriate to the size of the business and the sensitivity of the information handled. No internet service can guarantee perfect security.
Changes
Provider may update this policy. The "Last updated" date will change. Material changes will be posted on https://obraup.com or sent by email where appropriate.
Contact
Privacy: support@obraup.com Support: support@obraup.com Legal notices: support@obraup.com
Provider Privacy Policy · Obra Tech LLC · October 3, 2026
Questions? Email support@obraup.com