Privacy Policy

Information you provide. When you create an account, request a demo, or contact us, we collect information such as your name, email address, and anything you choose to share. If you create an account, we collect your login credentials. If you buy a paid plan, our payment processor (Stripe) collects and processes your payment details; we do not store full card numbers.

Information collected automatically. When you use our website or app, we automatically collect technical and usage information such as your IP address, device and browser type, and how you interact with the service. We use essential cookies to operate the site. See our Cookie Policy for details.

We do not collect personal information about our account holders from third parties, and we do not process their sensitive or special-category personal information.

We use personal information to:

• provide, operate, secure, and improve our services;
• create and manage your account and respond to your requests;
• communicate with you about the service, including service messages and, where you have opted in, marketing;
• detect and prevent fraud and abuse; and
• comply with our legal obligations.

We process your information only where we have a valid legal basis to do so.

If you are in the EEA or UK, we rely on these legal bases under the GDPR and UK GDPR: your consent (which you may withdraw at any time), performance of a contract with you, our legitimate interests in operating and improving the service (balanced against your rights), and compliance with legal obligations.

We do not sell your personal information, and we do not share it for targeted advertising.

We share personal information with:

• Service providers (sub-processors) that help us run the service, such as hosting, database and storage, email, AI providers, and (when billing launches) payment processing. Each acts under contract and only as needed. A current list is on our Sub-processors page.
• Professional advisors and authorities, where required by law or to protect our rights, our users, or the public.
• A successor entity, in connection with a merger, financing, acquisition, or sale of assets.

We are based in the United States and process data there. Where we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as the EU Standard Contractual Clauses (with the UK Addendum where applicable).

We keep personal information for as long as needed to provide the service, then delete or de-identify it, unless a longer period is required by law (for example, tax or accounting). Account information is kept for the life of your account.

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to object to or restrict certain processing, and to data portability. To exercise any of these, email privacy@withoverheard.com. You can opt out of marketing emails at any time using the unsubscribe link.

If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority. If you are a US state resident (for example, in California), you may have similar rights to access, correct, and delete your information; contact us at the same address and we will honor your request as required by applicable law.

We do not respond to browser “Do Not Track” signals, as there is no common industry standard for them.

Our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact privacy@withoverheard.com and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated version with a new “last updated” date and, for material changes, take additional steps as required by law.

Questions or requests: privacy@withoverheard.com, or by mail to Unidata Labs, Inc., 2261 Market Street, Suite 22881, San Francisco, CA 94114, United States.