OBPrint is a product of OpsBuilt, LLC ("we", "our", or "us"). This Privacy Policy explains how we collect, use, and protect your information when you use our software and services.
1. Information We Collect
We may collect the following types of information:
Account Information
- Name
- Email address
- Phone number
- Business information
- VAT/GST registration numbers (when you provide them for quotes and invoices)
Tax and Billing Information
- Tax codes, rates, and exemptions you configure for your business
- Customer VAT/GST identifiers that you enter for quotes, sales orders, and invoices
- Tax-exempt status and related notes you assign to customers or documents
Usage Data
- Quotes, sales orders, invoices, and production data entered into OBPrint
- App activity and interactions
Third-Party Integrations
- If you connect external services (such as Google, Stripe, Square, or others), we may access limited data necessary to provide functionality.
- For Google integrations, this may include:
- Email metadata
- Email sending capabilities (if enabled by the user)
- For Dropbox, OBPrint lists your folder names so you can choose where job folders go, then creates job folders there and reads and writes files inside those folders. We do not use your other Dropbox files. You can disconnect Dropbox in Settings → API Integrations or from your Dropbox account at any time.
- We do not access or store more data than necessary to provide the requested features.
2. How We Use Your Information
We use your information to:
- Provide and operate OBPrint services
- Process orders, invoices, and customer data
- Display tax, VAT, or GST information on quotes, invoices, and customer-facing documents
- Support reverse-charge and tax-exempt workflows based on data you provide
- Enable integrations (such as email, payments, and messaging)
- Improve performance and user experience
- Communicate important updates or support responses
3. Data Storage and Security
- Your data is stored securely using trusted infrastructure providers, including but not limited to:
- Supabase (database, file storage, and authentication), hosted on Amazon Web Services in the United States
- Vercel (application hosting)
- Cloudflare R2 (encrypted backups)
- Other secure cloud providers as needed
- Data is encrypted in transit (HTTPS) and at rest.
- Each shop's data is kept separate from other shops' data.
- We take reasonable steps to protect your information from unauthorized access, loss, or misuse.
4. Payment Card Data
- We do not see or store full card numbers. Card payments are entered with and processed by Stripe or Square, depending on the processor you connect. We store transaction details such as amount, status, and processor reference IDs.
5. Backups
- Our database provider makes its own regular backups of the database.
- We also back up the database and uploaded files nightly to Cloudflare R2. These backups are encrypted before they leave our systems, so Cloudflare stores only encrypted data.
- Daily backups are kept for 14 days, weekly backups for 8 weeks, and monthly backups for 12 months.
6. Staff Access to Your Data
- Only authorized OpsBuilt administrators can view a shop's account, and only to provide support, investigate a problem, or keep the service secure.
- Each admin session requires a recorded reason, ends automatically after 60 minutes, and is logged.
- Staff you add to your own shop can see your shop data according to the roles and permissions you assign them.
7. Security Incidents
- If we learn of a security breach that affects your data, we will notify the account owner without undue delay, explain what happened and what data was involved, and describe the steps we are taking.
8. International Data Transfers
- OBPrint is operated from the United States. If you or your customers are located in the European Economic Area (EEA), United Kingdom, Australia, Canada, or other regions with data protection laws, your information may be transferred to and processed in the United States.
- We use infrastructure providers such as Supabase and Vercel that maintain appropriate safeguards, including data processing agreements and, where applicable, standard contractual clauses for cross-border transfers.
- By using OBPrint, you acknowledge that your data may be processed outside your country of residence as necessary to provide the service.
9. Analytics, Diagnostics, and AI
We use third-party tools to understand product usage, fix errors, and power optional AI features:
PostHog (product analytics)
- Page views, clicks, and feature usage in the OBPrint web app
- Session replay in production (form inputs are masked; sensitive fields can be marked to hide text)
- Cookies and local storage identifiers to associate events with a session
- We use PostHog to improve the product — not to sell ads or retarget you on other websites
Sentry (error monitoring)
- Error messages, stack traces, and performance data when something fails
- Browser/device metadata and the page URL where an error occurred
- Your user ID may be attached to error reports to help us investigate
AI providers (OB-5 assistant and AI features)
- When you use OB-5 or other AI features, your prompts and relevant shop context may be processed by third-party AI providers to generate responses. We currently use OpenAI, Google (Gemini), Anthropic (Claude), and Perplexity, accessed through Vercel AI Gateway.
- To search by meaning (similar past quotes, related Help Library guides, and likely duplicate feature requests), we send the text of your quotes, your Help Library searches, and feature requests to OpenAI through Vercel AI Gateway, which turns them into numeric embeddings that we store in our database. Quote text covers products, quantities, decoration, prices, and notes; it leaves out customer names and contact details.
- If you connect outside apps to OB-5, those connections run through Composio, which passes the data needed for the actions you request between OBPrint and the connected app.
- Do not submit information you are not authorized to share with a third-party AI provider
10. Data Sharing
- We do not sell your personal information for money.
- We share information with service providers who process it on our behalf to operate OBPrint, including:
- Hosting and database (Supabase, Vercel)
- Encrypted backups (Cloudflare)
- Product analytics and session replay (PostHog)
- Error monitoring (Sentry)
- Payment processors (Stripe, Square)
- Email delivery (Postmark and similar)
- AI processing when you use OB-5 or AI features (OpenAI, Google, Anthropic, Perplexity, through Vercel AI Gateway)
- Connected apps for OB-5 (Composio)
- File storage you connect (Dropbox)
- Shipping, messaging, and other integrations you enable
- All third-party providers are expected to maintain industry-standard security practices and use data only as needed to provide their service to us.
- If OpsBuilt, LLC is sold, merged, or transfers the OBPrint business, your data may be transferred to the new owner under this policy. We will notify account owners before that happens.
11. Google User Data
- If you choose to connect your Google account:
- We only access data necessary to provide features you enable
- We do not use Google data for advertising
- We do not sell or share Google user data with third parties outside of required functionality
- Our use of Google user data complies with Google API Services User Data Policy.
12. Your Rights
Depending on your location, you may have the right to:
- Access your data
- Request corrections
- Request deletion of your account and associated data
- Object to or restrict certain processing where applicable under local law
- Request a copy of your data in a portable format
- You can export customers, and orders and invoices, to CSV yourself from the Customers and Reports pages. For a full export of your shop data, including pricing, contact us.
13. Data Retention
- We retain your data as long as your account is active or as needed to provide services. You may request deletion at any time.
- After you delete your account, copies of your data may remain in encrypted backups until those backups expire (up to 12 months). We do not restore deleted shop data from backups except to recover from a system failure.
14. Changes to This Policy
- We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
15. Contact
- If you have any questions about this policy, contact: