Privacy Policy

Last updated: April 15, 2026

BQ Production LLC ("Obra," "we," "us," or "our") operates the Obra platform. This Privacy Policy describes how we collect, use, and protect your personal information when you use our services.

1. Information We Collect

Information You Provide

• Account information: Email address (required for registration)
• Business profile: Business name, phone number, business type, preferred language
• Business logo: Uploaded image (resized to 200x200, max 50KB)
• Project content: Photos you upload for AI analysis, reports, estimates, and other tools
• Directory listing: Business description, photos, reviews, work locations, social media links, license number
• Memories: User-created notes and preferences for AI personalization

Information Collected Automatically

• Usage data: Credit usage history, tool actions, timestamps
• Error data: JavaScript errors (page, error message, browser type) for debugging purposes
• Authentication data: Login timestamps, authentication method (email or Google OAuth)

Information We Do NOT Collect

• We do not use tracking cookies, third-party analytics, or advertising trackers
• We do not store credit card or payment card information
• We do not track your browsing activity across other websites
• We use localStorage (browser-side storage) only for session management and caching

2. How We Use Your Information

• To provide and operate our AI-powered tools for contractors
• To process your photos and text through AI models for analysis, reports, and estimates
• To manage your account, credits, and subscription
• To display your business in the public Contractor Directory (if you opt in)
• To generate personalized AI tips based on your usage patterns
• To diagnose and fix technical issues
• To communicate important service updates

3. Third-Party Services

We use the following third-party services to operate Obra. Your data may be processed by these services in accordance with their respective privacy policies:

• Cloudflare: Hosting, CDN, and data storage (Cloudflare Workers KV)
• Google OAuth: Optional sign-in method (name, email, profile picture)
• Anthropic (Claude AI): AI text and image analysis
• Google (Gemini AI): AI text and image analysis (fallback)
• OpenAI (GPT-4o): AI text and image analysis
• Groq: AI text processing (Llama, Mixtral models)
• Manus AI: AI agent processing
• Apify: Social media profile data scraping (for Social Analysis tool)
• PayPal: Payment processing (redirected to PayPal's site)
• OpenStreetMap / Nominatim: Address geocoding for directory map
• Amazon Associates Program: Obra participates in the Amazon Services LLC Associates Program, an affiliate advertising program. When you click an Amazon product link on our News page and make a qualifying purchase, we earn a small commission at no additional cost to you. Amazon may use cookies to track referrals; please review Amazon's privacy policy for details.

4. Payment Information

We do not store any payment card information. Payments are processed through:

• PayPal: You are redirected to PayPal's secure payment page. We only receive a transaction confirmation.

5. Data Storage and Security

Your data is stored on Cloudflare Workers KV, a globally distributed key-value store. We implement the following security measures:

• All data transmitted over HTTPS (TLS encryption in transit)
• Authentication tokens (UUIDs) with no password storage
• Rate limiting (10 requests per minute per user)
• Admin access protected by password authentication
• Verification codes expire after 10 minutes

6. Data Retention

• Account data: Retained until you request deletion
• Project history: Last 200 projects retained per user
• Credit usage history: Last 500 entries retained per user
• Error reports: Automatically deleted after 30 days
• Verification codes: Automatically deleted after 10 minutes
• Photos: Processed in memory by AI services; we store thumbnails (200px) only

7. Your Rights Under California Law

California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to:

• Know: Request disclosure of the personal information we collect, use, and share about you
• Delete: Request deletion of your personal information
• Opt-out: We do not sell or share your personal information with third parties for their marketing purposes
• Non-discrimination: We will not discriminate against you for exercising your privacy rights

California Online Privacy Protection Act (CalOPPA)

In compliance with CalOPPA:

• This privacy policy is accessible from every page of our website
• We disclose all categories of personal information collected
• We disclose all third parties with whom information is shared
• Do Not Track: We do not track users across third-party websites. We do not respond to Do Not Track signals because we do not engage in tracking.

8. Children's Privacy

Obra is designed for business professionals and is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Directory and Public Information

If you create a listing in the Obra Directory, the following information may be publicly visible depending on your tier:

• Free tier: Business name and type only
• Pro tier: Business name, type, phone, email, logo, photos, reviews, work locations
• Featured tier: All Pro information plus WhatsApp group link and premium placement

You can update or remove your directory listing at any time through your account settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of Obra after changes constitutes acceptance of the updated policy.

11. Contact Us