This policy explains what ObraDesk("ObraDesk") collects, how we use it, and who we share it with.
1. Information we collect
- Account & business: your name, email, business name, type, address, phone, logo, and settings.
- Content you enter:your customers' names and contact details, invoices, estimates, line items, notes, and photos you upload.
- Payment information: handled by Stripe. We do not store full card numbers; we keep a Stripe customer/subscription identifier and status.
- Usage and device data: log data, IP address, and basic analytics needed to run and secure the service.
2. How we use it
To provide and improve the service, generate your documents, process your subscription, provide support, prevent abuse, and comply with law.
3. Service providers we share with
We use trusted providers that process data on our behalf, including: Supabase (database, authentication, storage), Stripe (subscription billing), Anthropic (the AI that improves and translates your wording, which receives the text you submit for that feature), Resend (email delivery), and Google (optional sign-in). We do not sell your personal information.
4. AI features
When you use "Improve wording" or translation, the relevant text is sent to our AI provider to generate a draft. Do not enter information you are not comfortable processing this way.
5. Retention
We keep your data while your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce agreements. You can request deletion as described below. We retain records of staff access to accounts (who accessed what, and when) for 24 months for security and audit purposes.
6. Security
We use industry-standard measures, including row-level security so each business can only access its own data. No method of transmission or storage is 100% secure.
Staff and support access. Authorized ObraDeskpersonnel may access your account and content, including your customer records, estimates, invoices, uploaded documents, and your inputs to and transcripts of the AI assistant (including voice transcripts), when reasonably necessary to provide support you request, operate and secure the service, debug problems, investigate abuse or violations of our terms, or comply with law. We limit such access to authorized personnel on a need-to-know basis, keep it to the minimum reasonably necessary, hold it under confidentiality obligations, and log it for security and audit purposes. We do not access your content for advertising, we do not sell it, and we do not use your or your customers' personal information to train AI models. Contact us at support@obradesk.com with questions about, or to request a record of, staff access to your account.
7. Your choices and rights
You can access and update your information in the app, and request a copy or deletion of your data by contacting us. Depending on where you live, you may have additional rights under laws such as the CCPA.
8. Your customers' data
Information you enter about your own customers is yours; you are responsible for having the right to provide it and for responding to your customers' privacy requests. We process it on your behalf.
9. Children
The service is not directed to children under 18.
10. Changes & contact
We may update this policy and will note the new version here. Questions or requests: support@obradesk.com.