Privacy Statement

We collect the following categories of information:

• Account information — your name, work email, password credentials, workspace, and role, provided when you sign up or are invited.
• Billing information — plan, subscription status, and billing contact. Payment card details are collected and stored by our payment processor, Stripe, not by us.
• Content you provide — the mandates, notes, saved accounts, and contacts you create or import into your workspace.
• Usage and device data — log data, IP address, browser type, and product interactions, used to operate and secure the service.
• Cookies — essential cookies for authentication and session management.

Obcervation researches and monitors organizations and professional (business) contacts against the mandate you define, drawing on public and licensed third-party sources. This may include company details and professional contact information such as names, job titles, and work email addresses. Our email verification is performed using DNS-level checks only; we do not send probing messages to the addresses we validate.

Where we process this information, we do so as a processor acting on your instructions. You are the controller of the prospect data in your workspace and are responsible for having a lawful basis to process it.

• to provide, maintain, and secure the service;
• to generate the intelligence, dossiers, and recommendations that are the core of the product;
• to process subscriptions and payments;
• to communicate with you about your account, security, and service updates;
• to improve reliability and performance, and to detect and prevent abuse;
• to comply with legal obligations.

Some intelligence is generated with the help of a managed third-party AI provider. Content may be sent to that provider to produce summaries, dossiers, and recommendations. We select providers that offer appropriate confidentiality protections, and we do not use your content to train third-party foundation models except as needed to deliver the requested output.

We do not sell your personal information. We share information only with:

• Service providers (subprocessors) that host and power the service — including hosting and database infrastructure, our AI provider, and our payment processor — under contracts that limit their use of the data;
• Integrations you connect (for example, when you push findings to your CRM), at your direction;
• Authorities or others when required by law, to enforce our terms, or to protect rights and safety.

We retain account and content data for as long as your workspace is active and as needed to provide the service. After termination, we delete or de-identify data within a reasonable period, unless we are required to retain it to meet legal, tax, or security obligations.

We use technical and organizational measures to protect information, including encryption in transit, access controls, and tenant isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing (for example, under the GDPR or CCPA/CPRA). To exercise these rights, contact us at hello@obcera.com. If your personal data is held in a customer workspace as prospect data, we will refer your request to that customer, who acts as the controller.

We and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

Obcervation is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18.

We may update this Privacy Statement from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.

For privacy questions or requests, contact Obcera LLC at hello@obcera.com. This statement is effective as of August 5, 2026.