Privacy Policy
OverControl ("we", "our", or "us") respects your privacy and is strongly committed to protecting information processed when you use our website, dashboard, API, and related services (collectively, the "Services").
Our Services are designed around data minimization. In particular, content sent through the OverControl API is processed only to provide the requested model response and is not retained as described below.
Policy date: July 06, 2026
Information Related to Use of the Service
Some limited information may be processed in order to provide, secure, and maintain the Services.
Account Information
If you create an account, authentication is handled by Clerk, a third-party authentication provider. Clerk may process information associated with your account, such as your email address, authentication identifiers, and related account information.
We use this information to authenticate users, manage accounts, and provide access to the Services.
If you contact us directly, we may also receive your contact information and the contents of your communication so that we can respond.
API Content
When you use the OverControl API, you may provide prompts, messages, files, images, documents, or other inputs and receive model-generated outputs ("API Content").
OverControl does not retain API Content after the request has been processed.
API Content is processed only for the purpose of completing the request. We do not:
store API prompts or model responses as conversation history;
log the content of API requests or responses;
use API Content to train machine learning models;
use API Content for advertising, profiling, or analytics.
Once processing has completed, API Content is not available to us for later review or retrieval.
This means that OverControl cannot search, view, or recover the contents of a previous API request after it has been processed.
Where API Content contains personal data submitted by a customer through the API, OverControl processes that data on behalf of the customer for the purpose of providing the requested Service.
Stored Files
If you intentionally upload and save a file using a feature designed for account storage, such as the Files area of the dashboard, that file is stored so that it remains available to your account.
Stored files are separate from ordinary API request content and remain available until they are deleted by you, your account is deleted, or retention is otherwise required by law.
Stored files are not used to train our machine learning models.
Technical Information
Our systems process limited technical information necessary to operate, secure, measure, and maintain the Services.
This may include information such as request timestamps, account or API key identifiers, model used, usage or token counts, request status, latency, browser or device information, and similar operational information.
Technical logs do not contain the content of API prompts, request bodies, uploaded request content, or model responses.
Technical information may be used to maintain reliability, measure API usage, manage billing or limits, diagnose technical issues, and protect the Services from fraud, abuse, or security threats.
Cookies and Analytics
We use cookies and similar technologies where necessary to operate the website and dashboard.
If you allow measurement cookies, we use Google Analytics to understand how visitors interact with our website. Google Analytics may process information such as pages visited, browser and device information, and approximate location.
If you allow marketing cookies, Google advertising technologies may also be used to measure campaign performance and support advertising activities.
You can change your cookie preferences through the Privacy Choices control available on our website.
API Content is never included in analytics or advertising data.
How Information Is Used
Information processed in connection with the Services may be used to provide and maintain the Services, authenticate users, manage API access and usage, protect the security and reliability of our infrastructure, communicate with users, improve the website and Service experience, and comply with legal obligations.
Where applicable under data protection law, we process account and service information because it is necessary to provide our Services, technical and security information based on our legitimate interests in operating and protecting the Services, analytics and marketing information based on your consent where consent is required, and information necessary to comply with our legal obligations.
We do not sell personal information.
Disclosure of Information
We use a limited number of service providers where necessary to operate the Services.
These may include providers of authentication services, infrastructure and hosting, analytics, communications, and payment processing where applicable.
For example, authentication is provided through Clerk and website analytics may be provided through Google when you have permitted the relevant cookies.
Service providers may process information only as necessary to provide their services to us and subject to applicable contractual and data protection requirements.
We may also disclose information where required by law, to respond to a valid legal request, or where reasonably necessary to protect the security, rights, or integrity of OverControl, our users, or others.
API Content that is no longer retained cannot be produced or recovered by us in response to a later request because we no longer possess it.
Some service providers may process personal information outside the European Economic Area. Where this occurs, we use appropriate safeguards required by applicable data protection law.
Your Rights
Depending on where you are located, you may have rights regarding your personal information, including the right to access, correct, delete, or obtain a copy of your information; restrict or object to certain processing; withdraw consent where processing is based on consent; and request data portability where applicable.
You may also have the right to lodge a complaint with your local data protection supervisory authority.
You can exercise your rights by contacting us using the details below.
Because API Content is not retained after processing, we cannot provide, retrieve, correct, or delete API Content from past requests that we no longer possess.
Security and Retention
We implement technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
API traffic is protected in transit using encrypted connections, and API Content is processed without persistent content logging or retention.
Account information is retained while necessary to maintain your account and for any additional period required for legitimate legal, security, accounting, or compliance purposes.
Stored files remain available until deleted by you, your account is deleted, or retention is otherwise required by law.
Technical and operational logs are retained only for the period necessary for security, reliability, usage measurement, billing, and related operational purposes.
API prompts and model responses are not retained after processing.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, technology, or legal requirements.
When we make changes, we will publish the updated version on this page and update the date above. Where required by law, we will provide additional notice.
Contact
OverControl is responsible for the personal information described in this Privacy Policy when acting as a data controller.
Email: vittorio@overcontrolgroup.com
For questions about this Privacy Policy or our privacy practices, or to exercise your data protection rights, please contact us using the information above.