Privacy Policy
Placeholder draft. Final version will be reviewed by counsel and updated before general availability. Here's the intent.
Data we collect
- Account data — email, name, workspace roles.
- Document content — whatever you upload for extraction.
- Derived data — extracted fields, audit events, token usage.
- Operational telemetry — server-side logs, error reports.
How we use it
Strictly to run the service for you. We do not train models on your documents. OpenAI requests run on the zero-retention API tier, meaning neither prompts nor completions are retained by them for training.
Sub-processors
- OpenAI (LLM inference, zero-retention tier)
- Cloud provider (hosting + storage, EU/US region of your choice)
- Stripe (payments, Team + Enterprise plans)
- SMTP provider (transactional email: invites, notifications)
Retention
Documents are stored for the lifetime of the workspace and deleted within 30 days of account deletion. Audit events retained for 12 months. You can request earlier deletion at privacy@overlook.ai.
Your rights
GDPR / UK GDPR: access, rectification, erasure, portability. Email privacy@overlook.ai to exercise any right. We respond within 30 days.
Contact
Weplan SRL — Milan, Italy. Data protection queries: privacy@overlook.ai.