Privacy Notice

This Privacy Notice explains how Perygee, Inc., doing business as OverAI (“OverAI,” “we,” or “us”), collects, uses, and discloses personal information when you visit our websites, create or administer an account, communicate with us, or use the OverAI services (the “Services”).

Organizations using the Services may submit information about their own personnel, customers, and other people (“Customer Data”). For Customer Data, the organization controls why the information is processed and OverAI processes it on the organization’s behalf under ourData Processing Addendum. Requests concerning Customer Data should usually be directed to that organization.

1. Information we collect

Information you provide

• Account and organization information: name, email address, organization name, role, authentication information, invitations, and account preferences.
• Customer Data: content, files, prompts, outputs, workflows, integrations, and other information submitted through the Services.
• Communications: support requests, feedback, sales communications, and other messages you send us.
• Billing information: billing contact information, payment-method type, verification status, transaction identifiers, and a payment-method fingerprint used to prevent duplicate promotional credit. Our payment processor collects payment credentials directly; OverAI does not store full card or bank-account numbers.

Information collected automatically

• Service and security data: IP address, user agent, device and browser information, authentication events, activity logs, feature usage, errors, and diagnostic data.
• AI usage data: model, token counts, cached-token counts, provider cost, related resource and organization identifiers, and other information needed to operate, secure, and bill the Services.
• Website analytics: first-party visitor and session identifiers, pages and sections viewed, links selected, time engaged, referrer, campaign parameters, IP address, and user agent. We store the identifiers and first-touch attribution in browser storage. We do not use third-party advertising cookies or cross-site advertising trackers. These records are not linked to your account. When an advertising service gives us an opaque click reference, we may return that reference with a signup or booked-demo event to measure the ad's performance. We do not send the service your name, email address, or Customer Data for this measurement.
• Marketing contact details: the email address you enter on our website to get started, together with the campaign or referring site that brought you to us. We record it when you submit it, which may be before you finish creating an account, and we may use it to contact you about OverAI. You can ask us to delete it at any time using the contact details below.

2. How we use information

We use personal information to:

• provide, operate, maintain, and improve the Services;
• create and administer accounts and organizations;
• process Customer’s instructions and run configured integrations;
• provide AI features and calculate usage;
• verify payment methods, prevent promotional abuse, and process payments;
• secure the Services, prevent fraud, and investigate misuse;
• provide support and communicate about the Services;
• understand website and product performance; and
• comply with law and enforce our agreements.

We do not use Customer Data or Personal Data to train or fine-tune our own or a third party’s machine-learning models. We require our AI providers not to use this data for model training.

3. How we disclose information

We may disclose personal information:

• Within your organization: according to account roles, permissions, sharing settings, and the organization’s instructions.
• To infrastructure and AI providers: including Amazon Web Services for hosting and email delivery and Anthropic, Google Cloud, and OpenAI when providing AI features. The AI provider used depends on the model and feature selected.
• To our payment processor: to save payment methods, verify accounts, prevent fraud, and process transactions you authorize.
• To operational service providers: to deliver limited internal account, acquisition, security, and support alerts.
• To our scheduling provider: when you choose to book a demo, to show availability, create the appointment, and preserve the campaign attribution associated with that booking.
• To customer-directed services: when you connect an integration, configure an automation, publish content, or otherwise direct the Services to send information to another party.
• For legal and safety reasons: when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or establish or defend legal claims.
• For a business transaction: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use personal information for targeted advertising.

4. Cookies and browser storage

The Services use cookies and similar browser storage when needed for authentication, security, preferences, and operation. Our websites use first-party local and session storage for theme preferences, anonymous visitor and session identifiers, and campaign attribution. Blocking this storage may affect preferences or our ability to understand website usage, but it does not prevent access to public pages.

5. Retention

We retain personal information for as long as needed to provide the Services, maintain security and accounting records, comply with law, resolve disputes, and enforce agreements. Retention depends on the type of information and why it is processed. Customer Data is returned or deleted after termination as described in the applicable agreement and DPA. Data in encrypted backups is removed through normal backup rotation. Marketing contact details are retained for up to twelve months from collection, or until you ask us to delete them or unsubscribe.

6. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls, logging, testing, and incident-response procedures. No method of transmission or storage is completely secure.

7. International processing

OverAI is based in the United States, and we primarily host and process information there. If information is transferred from another country, we and our customers use safeguards required by applicable law. International customers may also use OverAI under an order form or other written approval. Self-service Starter registration and its promotional usage are offered only to organizations with a principal place of business in the United States.

8. Your privacy rights

Depending on where you live and the context in which we process your information, you may have rights to access, correct, delete, or obtain a copy of personal information; restrict or object to processing; or appeal our response to a request. You may also withdraw consent where consent is the basis for processing. We will not discriminate against you for exercising a privacy right.

Email hello@overai.com to submit a request or appeal. We may need to verify your identity and authority. If your request concerns Customer Data, we may direct it to the organization that controls that data or assist that organization in responding.

9. Children

The Services are for business use and are not directed to children. Users must be at least 18. If you believe a child has provided personal information to us, contact us so we can investigate and delete it where appropriate.

10. Changes to this Notice

We may update this Notice as our Services or legal obligations change. We will update the date above and provide additional notice when required by law or when a change materially affects how we use personal information.

11. Contact us

Questions, complaints, and privacy requests may be sent tohello@overai.com or by mail to:

Perygee, Inc. (doing business as OverAI)
1111B S Governors Ave, STE 6372
Dover, DE 19904
United States