Privacy policy.
Last updated · 2026-05-15
What we collect
We collect: (1) the document you upload for audit; (2) your email address from Stripe at time of purchase; (3) standard web analytics (pages visited, time on site) via privacy-respecting analytics. We do not require account creation, do not require name or address, and do not collect demographic data.
What we do with your uploaded documents
Uploaded documents are encrypted in transit (TLS 1.3) and at rest (AES-256). They are processed by our AI audit engine, which generates a findings report. After audit, both the document and the report are stored encrypted in your account. Documents are automatically and permanently deleted 30 days after upload.
Who can see your documents
Only the AI audit pipeline accesses your raw document. No Overcheck employee, contractor, or partner has direct access to uploaded documents. AI providers (currently OpenAI) process the document text per their respective privacy terms — OpenAI's enterprise tier does not retain data for training (verified in our service agreement). Findings reports are accessible to you only via authenticated link.
What we do NOT do with your data
We do not sell your data. We do not share your data with third parties for advertising. We do not use your data as training data for AI models. We do not retain your documents after 30 days. We do not aggregate your data with other users' for resale or analytics products.
Data deletion on request
You can request deletion of your account, all reports, and any retained data at any time by emailing [email protected]. We will delete within 30 days and confirm via email.
Cookies and analytics
We use first-party cookies for session management only. We do not use third-party advertising cookies or tracking pixels. Aggregated, anonymized analytics are collected via our analytics provider for site improvement (no personal data, no document content).
Children
Overcheck is not intended for use by individuals under 18. If you are under 18, do not use this service.
Changes to this policy
Material changes to this policy will be communicated by email and a banner on the homepage at least 30 days before taking effect.
Contact
Privacy questions: [email protected]. Data deletion requests: [email protected]. Mailing address provided on request.
See also: Terms of use