Privacy

Privacy policy.

Overtell is a B2B product. We collect the minimum personal data needed to operate the service, we do not sell it, and you can ask us to remove it at any time.

Data we collect

When you sign in, we store your email address so we can send the magic link and the daily digest. When you visit the site signed in, we set a first-party session cookie. When you use the dashboard, we log anonymous pageview data via Vercel Web Analytics (first-party, cookie-less).

That is the full list. We do not run Google Analytics, we do not run third-party advertising pixels, and we do not share visitor data with ad networks.

Why we collect it

Your email is the account identifier for the digest subscription and for dashboard access. The session cookie keeps you signed in between visits. The analytics data is used to understand which pages drive sign-ups and to fix slow or broken surfaces. We do not use any of this to build a marketing profile of you.

How long we keep it

Your account email is retained for as long as the account is active, plus 12 months for accounting and invoice history. Session cookies expire after 30 days of inactivity. Anonymous analytics logs are retained for 12 months.

If you cancel the service, you can ask us to delete the account email early and we will comply within 30 days, save for invoice records that we are required to keep under Maltese accounting law.

Third parties

Overtell uses four service providers that may process your data as part of delivering the service:

  • Brevo sends the magic-link and daily digest email. Your email address is stored in Brevo for this purpose.
  • Stripe handles billing if you subscribe to Pro or Team. Stripe stores name, billing address, and VAT ID directly; Overtell does not see card data.
  • Vercel hosts the application. Vercel receives the raw HTTP request data needed to serve pages, plus first-party Web Analytics.
  • Neon hosts the Postgres database where the account email and session token are stored.

Each of these providers publishes its own privacy policy and maintains its own data processing terms. We use them as data processors under GDPR Article 28.

Your rights

Under GDPR you have the right to access the personal data we hold about you, correct it, export it in a portable format, and ask us to delete it. To exercise any of these rights, email info@overtell.io from the address associated with the account. We respond within 30 days.

Changes

If this policy changes in a way that affects how your data is used, we notify active subscribers by email before the change takes effect. The version date at the top of this page reflects the most recent revision.