Last updated: June 18, 2026

1. Introduction

Overlay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Overlay mobile apps (including iOS), browser extension, and website at overlay.one (together, the "Service").

2. Information We Collect

We collect the following types of information:

Account Information: When you create an account, we collect your email address and authentication information from your sign-in provider (such as Google or Apple).
Content You Create: The Service is built to capture and remember what you give it. This includes the notes, tasks, chat messages, prompts, saved web pages and links, and any images or files you add. We store this content so we can provide the Service back to you and let our AI features reason over it.
Usage Data: Information about how you interact with the Service, including features used and approximate request counts, used to operate and improve the product.
Device & Technical Information: Basic device, app version, browser, and connection information needed to deliver and secure the Service.

We do not sell your personal information, and we do not use your content to train our own generalized AI models.

3. How We Use Your Information

We use your information to:

Provide, maintain, personalize, and improve the Service
Generate AI responses, summaries, and suggestions from the content you give us
Sync your data across your devices and the browser extension
Send you technical notices and support messages
Respond to your comments and questions
Protect the Service and enforce our terms

4. AI Processing and Third-Party Model Providers

Overlay's assistant and "brain" features are powered by third-party large language model providers, currently Anthropic (Claude), Google (Gemini), and OpenAI. To answer your requests and organize your content, the relevant content you submit — such as your message, related notes, or a saved page — is sent to one of these providers to generate a response.

These providers process that content on our behalf, in accordance with their API terms, solely to return a result to you. We send only what is needed to fulfill your request, we do not sell your content, and we do not share it with advertisers or data brokers.

5. Data Storage and Security

Your account and content are stored with our infrastructure providers and protected with row-level access controls so that your data is accessible only to your account. We use encryption in transit and implement appropriate technical and organizational measures to protect your information against unauthorized access, loss, or destruction.

6. Data Retention and Account Deletion

We retain your content for as long as your account is active or as needed to provide the Service. You are in control of your data:

Edit or delete content: You can edit or delete individual notes, tasks, chats, and other items at any time from within the apps or the website.
Delete your account: You can permanently delete your account and all associated data at any time directly in the app (Settings → Delete Account), which removes your account immediately. You can also email [email protected]. We delete your personal data and content within 30 days of any such request, except where we are required to retain it for legal compliance.

7. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Google User Data

When you connect your Google account to our service:

Data Sharing: We do not share, transfer, or disclose your Google user data with any third parties except for the following limited circumstances: (1) with your explicit consent, (2) for legal compliance, or (3) with trusted service providers who assist us in operating our service and who are bound by confidentiality obligations.
Data Retention and Deletion: We retain Google user data only as long as necessary to provide you with our services. You can revoke access to your Google data at any time through your Google account settings or by contacting us. Upon revocation or account deletion, we will delete all Google user data within 30 days.
AI/ML Training: We explicitly affirm that we do not use Google user data obtained through Google Workspace APIs to develop, improve, or train generalized artificial intelligence (AI) and/or machine learning (ML) models.
Limited Use: Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Third-Party Services

Our service may link to or integrate with third-party services. This Privacy Policy does not apply to those third-party services, and we encourage you to read their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].