Privacy Policy

Effective date: October 10, 2026 · Last updated: October 12, 2026

This Privacy Policy (“Policy”) describes how Jason Henkel, a sole proprietor doing business as “Obia” (“Obia,” the “Company,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes information about you when you access or use our websites, applications, platform, and related services (collectively, the “Services”), or when you otherwise interact or communicate with us.

This Policy is incorporated into and forms part of our Terms & Conditions. By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, you should not access or use the Services.

1. Scope of This Policy

This Policy applies to information we process in connection with the Services. It does not apply to information collected by any third party, including through any third-party website, application, or service that you may access through the Services, or to any party that we do not own or control. We encourage you to review the privacy policies of any third parties before providing information to them.

2. Information We Collect

We collect the following categories of information:

(a) Information you provide to us.

Identity and contact data, such as your name, email address, telephone or mobile number, company name, and job title.
Commercial requirements data, such as the type, size, location, use, and budget of commercial real estate in which you or your clients are interested.
Communications data, such as the content of and metadata associated with your communications with us by telephone, email, SMS, or through the Services, and any feedback or support requests you submit.
Account data, such as credentials and preferences associated with any account you create.

(b) Information we collect automatically.

Device and usage data, such as your IP address, browser type and settings, operating system, referring URLs, the pages and features you access, and the dates and times of your interactions.
Cookies and similar technologies, as further described in Section 4.

We may receive information about you from service providers, analytics providers, and business partners (for example, brokers or colleagues who refer you to us), and we may combine such information with information we already hold about you.

3. How We Use Your Information

We use the information we collect for the following purposes and on the following legal bases, where applicable:

To provide, operate, maintain, and improve the Services, and to develop new features (performance of a contract; legitimate interests);
To match you or your clients with relevant commercial properties and to deliver notifications — including, where you have provided consent, by SMS — when new listings meet stated requirements (performance of a contract; consent);
To communicate with you, respond to inquiries, and provide customer support (performance of a contract; legitimate interests);
To send administrative, transactional, and, where permitted, promotional communications, subject to your right to opt out (legitimate interests; consent);
To monitor, detect, prevent, and address fraud, abuse, security incidents, and other harmful or unlawful activity (legitimate interests; legal obligation);
To perform analytics and research to understand how the Services are used (legitimate interests); and
To comply with applicable laws, regulations, legal process, and governmental requests, and to establish, exercise, or defend legal claims (legal obligation; legitimate interests).

4. Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, pixels, local storage, and similar technologies to operate and secure the Services, remember your preferences, measure engagement, and understand usage (we use PostHog for product analytics). You may configure your browser to refuse or delete cookies; however, certain features of the Services may not function properly without them.

5. SMS / Text Messaging Privacy

Where you opt in to receive text messages from us — for example, by checking the optional SMS consent box on our contact form, or by texting us first — we collect and process your mobile telephone number and related consent records (the consent wording you agreed to and when) for the sole purpose of exchanging the messages you have requested about your space search and operating the messaging program described in our Terms & Conditions. Message frequency varies, and message and data rates may apply. You may withdraw your consent and opt out at any time by replying STOP to any message, or obtain assistance by replying HELP or contacting admin@obia.io.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. How We Disclose Your Information

We do not sell your personal information, and we do not disclose it to third parties for their own direct-marketing purposes. We disclose information only as follows:

Service providers. To vendors and processors who perform services on our behalf — such as cloud hosting, messaging delivery, analytics, and customer support — under written agreements that require them to protect the information and to use it only to provide services to us.
Legal and safety. When we believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our agreements; or to protect the rights, property, or safety of Obia, our users, or others.
Business transfers. In connection with, or during negotiations of, any merger, financing, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, in which case information may be transferred as a business asset, subject to the protections of this Policy.
With your direction or consent. When you direct us to share information or otherwise consent to its disclosure.
Aggregated or de-identified data. We may share information that has been aggregated or de-identified such that it cannot reasonably be used to identify you.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we will delete or de-identify it in accordance with applicable law and our retention practices.

8. Data Security

We maintain reasonable and appropriate administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and destruction. No system, however, can be guaranteed to be completely secure, and we cannot warrant the absolute security of your information.

9. International Data Transfers

We are based in the United States, and we process and store information in the United States and other jurisdictions. If you access the Services from outside the United States, you understand that your information may be transferred to, stored in, and processed in a country whose data-protection laws may differ from those of your jurisdiction, and you consent to such transfer and processing consistent with applicable law.

10. Your Privacy Rights

Depending on where you reside, you may have certain rights with respect to your personal information, which may include the right to access, correct, update, port, restrict, or delete your information, to object to or withdraw consent for certain processing, and to opt out of certain disclosures. To exercise any of these rights, contact us at admin@obia.io. We will respond consistent with applicable law and may need to verify your identity before fulfilling your request. You will not be discriminated against for exercising your rights.

California residents. Consistent with the California Consumer Privacy Act, as amended, we do not sell or share personal information as those terms are defined under that law, and California residents may exercise the rights described above.

Withdrawing SMS consent. You may withdraw consent to receive text messages at any time by replying STOP, as described in Section 5 and in our Terms & Conditions.

11. Do Not Track

Some browsers offer a “Do Not Track” signal. Because no common industry standard for responding to such signals has been adopted, we do not currently respond to them. We will update this Policy if that changes.

12. Children's Privacy

The Services are intended for business users and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we may delete it.

13. Changes to This Policy

We may revise this Policy from time to time. When we do, we will update the “Last updated” date above and, where required by law or where changes are material, provide additional notice. Your continued use of the Services after the effective date of a revised Policy constitutes your acceptance of the revised Policy.

14. Contact Us

If you have questions or concerns about this Policy or our privacy practices, please contact us:

Jason Henkel, sole proprietor doing business as Obia
Email: admin@obia.io