Privacy | C-OBRA

1. Introduction

Welcome to C-OBRA ("C-OBRA", "Company", "we", "us", or "our").

C-OBRA provides a digital platform that facilitates communication, project coordination, document management, and workflow management between contractors, subcontractors, clients, and other project participants within the construction industry.

This Privacy Policy explains how we collect, use, disclose, and protect information when you use:

The C-OBRA website
The C-OBRA software platform
Mobile or web applications
Any related services (collectively, the "Services")

By accessing or using C-OBRA, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect several types of information in order to provide and improve our Services.

2.1 Information You Provide Directly

When you register or use C-OBRA, you may provide:

Account Information

Name
Company name
Email address
Phone number
Password
Role (contractor, subcontractor, client, etc.)

Project Information

Users may upload or create:

Project details
Construction drawings
Contracts
RFIs
Proposals
Invoices
Receipts
Change orders
Schedules
Site photographs
Notes and communications

Communication Data

Information shared through the platform including:

Messages
Comments
Notifications
Project updates
Attachments

2.2 Information Collected Automatically

When using the platform we may collect:

Device Information

IP address
Browser type
Operating system
Device identifiers
Language preferences

Usage Data

Pages visited
Actions performed
Features used
Session duration
Timestamps

Log Files

Our servers automatically record activity to help maintain security, troubleshoot issues, and improve the service.

2.3 Information Collected Through Invitations

C-OBRA allows General Contractors (GCs) to invite project participants such as subcontractors or clients. GCs provide the invitee's phone number and email address to initiate the invitation.

Invited users receive SMS messages containing "Magic Links" for secure, password-less access to project data.

2.4 Cookies and Tracking Technologies

We may use:

Cookies
Session cookies
Analytics tools
Performance monitoring tools

These technologies help us authenticate users, remember preferences, measure platform usage, and improve performance.

Users may disable cookies through their browser settings, though some features may not function properly.

3. How We Use Information

C-OBRA uses collected information to:

Provide the Service

Create and manage user accounts
Enable project collaboration
Store documents and project records
Facilitate communication between project participants

Improve the Platform

Analyze usage patterns
Troubleshoot issues
Develop new features

Security and Fraud Prevention

Detect unauthorized activity
Protect accounts and projects
Enforce platform policies

Communications

We may send:

Account notifications
Project updates
System alerts
Security notices
Service-related messages

SMS Notifications

We send project-specific alerts, "Action Required" notifications (e.g., signing a contract or paying an invoice), and Magic Link access tokens via SMS.

4. How Information Is Shared

C-OBRA does not sell personal information.

Information may be shared only in the following circumstances:

With Other Project Participants

Project data is visible to participants who are invited or granted access to that specific project. This may include contractors, subcontractors, project managers, owners, and consultants.

Service Providers

We may share data with trusted vendors who assist with cloud hosting, authentication, data storage, analytics, messaging services, and infrastructure operations.

These providers are contractually obligated to protect the information.

Legal Compliance

We may disclose information if required to comply with legal obligations, respond to lawful requests, protect rights, property, or safety, or enforce our Terms of Service.

IMPORTANT SMS DISCLOSURE

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Business Transfers

If C-OBRA undergoes merger, acquisition, restructuring, or sale of assets, user information may be transferred as part of that transaction.

5. Data Storage and Security

We implement commercially reasonable security measures including:

Encryption in transit
Access controls
Authentication safeguards
Monitoring systems

However, no digital platform can guarantee absolute security, and users share information at their own risk.

Users are responsible for maintaining the confidentiality of their account credentials.

6. Data Retention

C-OBRA retains information for as long as necessary to:

Provide the Services
Maintain project records
Comply with legal obligations
Resolve disputes
Enforce agreements

Project data may remain stored even after account closure if required for operational or legal purposes.

7. User Rights and Choices

Depending on applicable laws, users may have the right to:

Access their personal data
Request correction of inaccurate data
Request deletion of personal data
Object to certain processing activities

Requests may be submitted by contacting us at support@c-obra.com.

We will respond within a reasonable timeframe.

8. California Privacy Rights

If you are a resident of California, you may have rights under the California Consumer Privacy Act (CCPA).

California residents may request:

Disclosure of categories of personal data collected
Deletion of personal data (subject to exceptions)
Information about data sharing practices

C-OBRA does not sell personal information.

Requests may be submitted by contacting us using the details provided below.

9. Children's Privacy

C-OBRA is intended for professional use in the construction industry.

The platform is not directed to children under 13, and we do not knowingly collect information from children.

If we become aware that such data has been collected, we will take steps to delete it.

10. Third-Party Services

C-OBRA may integrate with third-party services such as cloud storage providers, analytics platforms, and messaging systems.

These third parties have their own privacy policies governing their use of information.

C-OBRA is not responsible for the privacy practices of external services.

11. International Data Transfers

Users accessing C-OBRA from outside the United States acknowledge that information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

12. Changes to This Privacy Policy

We may update this policy periodically. Continued use of the platform constitutes acceptance.

13. SMS Messaging & Consent (A2P 10DLC Compliance)

Consent

Users may choose to receive project-related text messages by opting-in via a checkbox on our registration page. Consent is not a condition of service or account creation. By opting-in, users agree to receive project-related alerts, "Action Required" notifications, and Magic Link access tokens.

Opt-Out

Users can cancel the SMS service at any time. Just text "STOP" to the short code or long code. After you send the SMS message "STOP" to us, we will send you an SMS message to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us.

Help

If you are experiencing issues with the messaging program you can reply with the keyword "HELP" for more assistance.

Frequency

Message frequency varies based on project activity (RFIs, Change Orders, and Schedule updates).

Rates

Message and data rates may apply for any messages sent to you from us and to us from you.

Contact Us

If you have questions about this policy, contact us at:

support@c-obra.com

Privacy Policy for C-OBRA