Privacy Notice

Last updated: March 2026. This notice describes OBAM's privacy practices for business users, prospects, and representatives of customer organizations.

For privacy requests, contact legal@obam.dev.

1. Scope

This Privacy Notice explains how OBAM collects, uses, discloses, and protects personal data processed through our website and SaaS platform in a business-to-business context.

2. Personal data we collect

We collect business contact details (name, work email, company, role), account and authentication data, workflow content submitted by authorized users, support communications, and limited technical/usage data such as IP address, browser type, and log events.

3. How we use personal data

We use personal data to provide and secure the Services, manage accounts, process verification and authorization workflows, communicate service updates, support customers, prevent abuse, comply with legal obligations, and improve platform performance.

4. Legal bases (where applicable)

When GDPR/UK GDPR applies, OBAM relies on contractual necessity, legitimate interests (such as security and service improvement), legal obligations, and consent where required for specific processing activities.

5. Data sharing

We share personal data only with trusted service providers acting on our instructions (for example hosting, infrastructure, email delivery, and analytics), with affiliates as needed, and with regulators or law enforcement when legally required.

6. International transfers

Where personal data is transferred across borders, OBAM uses appropriate transfer mechanisms such as standard contractual clauses and supplementary safeguards where required by law.

7. Security measures

OBAM implements commercially reasonable technical and organizational safeguards, including encryption in transit, access controls, tenant-aware architecture, logging, and incident response processes designed for SaaS operations.

8. Data retention

We retain personal data for as long as needed to provide the Services, satisfy legal and contractual obligations, resolve disputes, and enforce agreements. Retention periods vary based on data type, customer configuration, and applicable law.

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to processing of personal data, and to data portability. You may also have the right to lodge a complaint with a supervisory authority.

10. Cookies and similar technologies

OBAM uses necessary technologies for authentication, session management, and platform security. We use the Silktide Consent Manager to collect and apply visitor choices for optional cookie categories. For full details, see our Cookie Policy at /legal/cookies.

11. Changes to this notice

We may update this Privacy Notice periodically to reflect service, legal, or regulatory changes. Material updates will be posted on this page with a revised effective date.