Privacy Policy

1. Information We Collect

Personal Information

When you register or interact with our platform, we may collect:

• Name, email, company name, and contact details
• Authentication credentials (via SSO or email)
• Billing and payment information (where applicable)

Usage Data

We collect information on how you access and use Overcut, including:

• IP address, browser type/version, and device details
• Timestamps of interactions, pages visited, and API usage
• Logs and telemetry from Overcut's interface and agent execution

AI Interaction Logs

For performance, debugging, and quality assurance, Overcut may temporarily store data from user–agent interactions (e.g., prompts, inputs, metadata) to enhance AI behavior and model orchestration.

• Logs are retained for a limited period (currently 60 days) and then securely deleted.
• We do not use this data to train public or shared models.

Cookies and Tracking

We use cookies and similar technologies for session management, analytics, and functionality enhancements. You can manage cookie preferences via your browser settings.

2. How We Use Your Information

We use collected data to:

• Operate, maintain, and secure the Service
• Personalize user experience and UI behavior
• Monitor system health and debug agent behavior
• Notify you about product updates or changes
• Comply with legal and regulatory requirements

3. AI and Data Privacy

Overcut uses proprietary and third-party AI services:

• Default: Microsoft Azure OpenAI, which processes data in compliant regions under enterprise-grade privacy commitments.
• Optional Providers: You may choose to enable other large language model (LLM) providers (e.g., Anthropic, OpenAI, or others). These providers may process your prompts, inputs, or metadata in accordance with their own terms and policies.

We do not use your project data to fine-tune or train any public or shared models. All AI processing is scoped to your session or workspace unless explicitly configured otherwise.

We encourage users to review the privacy policies of any third-party LLM provider they enable in Overcut.

4. Data Storage and Transfers

Your data is stored and processed on secure Microsoft Azure servers (and, where applicable, by third-party AI providers) in compliant regions.

By using Overcut, you acknowledge that your data may be transferred and stored outside your local jurisdiction, subject to applicable data protection laws (e.g., GDPR, UK GDPR, CCPA, CPRA).

5. Third-Party Services

We may use third-party providers (e.g., payment processors, analytics tools, communication platforms) to deliver the Service.

• These providers have access only to the data necessary for their role.
• They are contractually bound to protect your information.
• We maintain a list of authorized sub-processors, available upon request.

6. Disclosure of Data

We may disclose your data:

• When required by law, subpoena, or legal process
• To protect Overcut's rights, operations, or users
• In the event of a merger, acquisition, or asset sale

We will never sell your personal data to third parties.

7. Data Security

We apply industry best practices, including:

• Encryption in transit and at rest
• Access controls and least-privilege policies
• Continuous monitoring and threat detection

Overcut leverages Microsoft Azure's certified infrastructure (SOC 2, ISO 27001, and related standards) as part of our security posture. Despite these safeguards, no system can be 100% secure, so we encourage responsible usage and reporting of any vulnerabilities.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or request portability of your personal data, as well as object to processing.

To exercise these rights, contact us at team@overcut.ai.

We may also provide a Data Processing Agreement (DPA) for enterprise customers upon request.

9. Children's Privacy

Overcut is intended for professional and enterprise use.

• We do not knowingly collect data from individuals under 13 (COPPA compliance).
• We also do not intend the Service for individuals under 18, and such use is prohibited.

If you believe we have inadvertently collected such data, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in technology, law, or our services.

• Significant changes will be communicated via email or prominent notice on the platform.
• Continued use of Overcut constitutes acceptance of the updated terms.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

team@overcut.ai