Privacy Policy
Last updated: April 21, 2026
1. Introduction
OVRLRD ("we," "us," or "our") operates the website ovrlrd.io and its associated services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Account Information: When you register, we collect your email address and a hashed password. We do not store plaintext passwords.
Usage Data: We log which tools you use and how many times per day for the purpose of enforcing plan limits and improving the Service.
Generated Content: Your AI tool inputs and outputs are stored in your output history, accessible only to your account. We do not use your content to train models.
Payment Information: Billing is handled entirely by Stripe. We do not store credit card numbers or financial account details on our servers.
3. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service
- Enforce usage limits based on your subscription tier
- Send transactional emails (welcome, upgrades, password resets)
- Process payments and manage subscriptions via Stripe
- Monitor and analyze usage trends to improve the Service
- Detect, prevent, and address technical issues or abuse
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information with:
- Stripe — payment processing
- Supabase — database hosting (SOC 2 compliant)
- Vercel — web hosting and infrastructure
- Google Gemini — AI generation (inputs are processed per Google's API terms; we do not share user PII with Google)
- Mailersend — transactional email delivery
We may disclose information if required by law or to protect the rights and safety of our users.
5. Cookies and Tracking
We use session cookies to maintain authentication state. We do not use third-party advertising cookies. We may use analytics to understand aggregate usage patterns.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Object to or restrict certain processing
- Data portability
To exercise any of these rights, contact us at the email below.
8. Security
We use industry-standard security measures including encrypted connections (SSL/TLS), hashed passwords, and row-level security on our database. No system is 100% secure; use the Service at your own risk.
9. Children's Privacy
The Service is not directed to individuals under 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided personal information, we will delete it immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "last updated" date. Continued use of the Service after changes constitutes acceptance.
11. Contact
For privacy-related inquiries, contact us at: privacy@ovrlrd.io