Privacy Policy

Definitions of the main terms in this privacy policy. Terms not defined here may be found in our Terms of Use.

The following definitions help you understand this Privacy Policy:

• User: any individual who uses or visits the Obraguru website and application, aged 18 or older with full civil capacity.
• Personal Data: any information provided and/or collected by Obraguru through any means that identifies or allows identification of a natural person under Law No. 13,709/2018. Legal entity data is not personal data.
• Data subject: the natural person to whom personal data refers.
• Processing: operations performed on personal data, such as collection, use, storage, sharing, and deletion.
• Data controller: OBRA GURU SERVICOS DIGITAIS LTDA, CNPJ 39.962.566/0001-30, operator of the Obraguru platform, responsible for processing described in this Privacy Policy, with scope in Brazil.
• Consent: express authorization by the data subject for Obraguru to process personal data for a previously described purpose when required as a legal basis.

We collect personal data when you access our website and app and after registration to use construction management services, daily work reports (RDOs), incidents, schedules, approvals, and teams, including assistive features (e.g. voice transcription, AI text improvement, and the Insights assistant), as made available on the platform.

We work to collect only the information needed to provide the expected services. Obraguru requests and collects personal information when users use the website or application.

2.1 Identity and registration information

During registration or contact forms, we may collect full name, email, phone, company name, role, and project address or location, among other fields needed for secure use of the services. In the app, when applicable and with device or identity provider permissions (e.g. Google sign-in), we may collect email, name, IP address, and location information.

Additional collection may occur when you interact with Obraguru on public channels, such as app store reviews or Google listings.

2.2 Project operational information

During use, you may submit text, photos, videos, signatures, progress percentages, weather records, equipment, labor, incidents, and other information linked to projects registered on the platform.

2.3 Payment information

For paid operations, billing data (e.g. tax ID and address) and payment data may be required depending on the payment method.

When using third-party payment services (e.g. Stripe), you may provide information directly in the processor's environment, including via redirect from Obraguru. Processing by the processor is governed by its privacy policy.

2.4 Information to improve your experience

Obraguru may collect IP address, pages or items clicked, session duration, proxy server, internet provider, and approximate location. Collection may use cookies and similar technologies; you may refuse or manage cookies through your browser and site options when applicable.

2.5 Third-party information

To operate projects on the platform, you may enter data about third parties (e.g. workers, project clients, or operational contacts). You must inform those third parties about processing by Obraguru. Such data is processed under this policy where applicable.

The Obraguru website and application are not intended for anyone under 18 and do not aim to collect personal information directly from minors. If we identify a violation, we may take appropriate measures, including account deletion.

As services evolve, new features may require new information. If we collect data not described here, we will update this policy and notify users at least 30 days before the change when required or appropriate.

We collect data when users access the platform (website or app) and when they register or submit forms (e.g. contact or demo requests). This processing is necessary for initial use of the services and legal compliance where applicable.

Obraguru collects only data essential to operate the service. Extra or sensitive data under the LGPD, when requested, is optional unless law or the nature of the service requires otherwise. We recommend submitting only what is necessary.

When registration requires acceptance of this Privacy Policy, we will indicate it clearly (e.g. check-box). If you do not agree with essential items, you may be unable to complete registration or use certain services.

Obraguru collects and uses information for the following purposes:

• Comply with applicable law;
• Allow access to the Obraguru website and application;
• Respond to requests from competent authorities;
• Provide construction management, RDO, incident, approval, and related features;
• Send communications by email, messaging apps (e.g. WhatsApp when used), or other channels about updates, security alerts, account notifications, surveys, or marketing when permitted;
• Investigate and prevent unlawful or abusive use of the platform;
• Perform checks against databases and other sources when necessary and lawful;
• Maintain security of the website, application, and infrastructure;
• Exercise rights in judicial, administrative, or arbitral proceedings;
• Personalize and improve Obraguru communications and marketing under applicable legal bases.

Users' personal data may be shared with third parties only in compliance with Law No. 13.709/2018 and other applicable rules.

To operate the platform, Obraguru may share data with entities in Brazil or abroad, including hosting, authentication, payments, analytics, artificial intelligence, and support providers. Data will be processed in line with the LGPD and the provider's local law, with contractual and security safeguards.

We adopt security standards compatible with legal requirements. By accepting this policy, you acknowledge sharing necessary for the purposes described here.

Data added to projects may be visible to other users invited by your company (internal team, project clients) according to permissions you configure.

Personal information you voluntarily post on Obraguru social channels is provided by your choice and may be processed by those platforms under their policies. Obraguru does not control processing by social networks.

In a merger, acquisition, restructuring, asset sale, bankruptcy, or insolvency, company assets including related data may be transferred. You will be notified before your data becomes subject to a substantially different privacy policy, when applicable.

Obraguru follows retention practices aligned with the LGPD. Personal data is stored for as long as needed for collection purposes and legal obligations.

For users who close their accounts, storage may continue for applicable legal periods (including, when applicable, up to 10 years after closure for legal obligations and defense in proceedings), unless law or an authority requires a different period.

Deletion or anonymization may be limited while there are pending matters between you and Obraguru.

For visitors without an account, browsing data may be retained as needed for the purposes described, generally up to one year, unless another period is required or justified by law.

Obraguru upholds data subject rights under Article 18 of the LGPD. Free of charge and at any time, when applicable to the case and legal basis:

• Confirmation of processing and access to data, including copies of records;
• Correction of incomplete, inaccurate, or outdated data;
• Clear information about the possibility of refusing consent and the consequences, when processing depends on consent;
• Withdrawal of consent when it is the legal basis, without affecting prior lawful processing; withdrawal may limit or interrupt services, with prior notice when applicable.

Personal Data may be stored in databases operated by Obraguru or on cloud infrastructure from contracted providers (e.g. Google Cloud / Firebase and related services), in compliance with applicable law, even if part of the infrastructure is outside Brazil.

Obraguru and its providers adopt security procedures to protect confidentiality, integrity, and availability. Internal access is limited to people and purposes that need it.

Even with security and monitoring measures, there is no absolute guarantee that data cannot be accessed, disclosed, altered, or destroyed if physical, technical, or administrative protections are breached.

To exercise the rights in section 7 or ask about data processing, contact the Data Protection Officer (DPO), Rafael Messias, at contact@obra.guru. Requests will be reviewed under applicable law.

Obraguru may revise this Privacy Policy at any time. Material changes will be published on obra.guru, with revision identification when applicable.

When appropriate, email notice will be sent at least 30 (thirty) days before material changes take effect. If you disagree with the revised policy, you may close your account or stop using the services. Continued use after the effective date may constitute acceptance of the new terms, as communicated.