Privacy Policy

1. Introduction

Welcome to Overstaff (“we,” “our,” or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to our website https://overstaff.ai and our SaaS application https://app.overstaff.ai (collectively, the “Service”).

By accessing or using our Service, you agree to the collection and use of your information in accordance with this policy.

2. Information We Collect

We collect information to provide specialized AI virtual employee services, manage your account, and improve our platform.

A. Personal Information

When you register or use our Service (specifically via Google Login), we may collect:

Identity Data: Full name, email address, and profile picture (provided via Google OAuth).
Billing Data: We use third-party payment processors (Paddle, PayPal, and Google Pay) to handle subscriptions and payments. We do not store your credit card information on our servers. All payment data is stored and processed securely by these providers.

B. Usage & Input Data (The “Work” Data)

To function as your virtual workforce, our Service processes:

Text & Image Inputs: Any text prompts, titles, product names, or images you upload for processing by our AI agents.
Voice Data: When you use the microphone feature, audio is processed in real-time to convert speech to text. We do not store audio recordings. The audio data is immediately discarded after transcription.
Output Data: The content (blog posts, images, strategies, code) generated by the Service.

C. Technical & Analytics Data

Device Data: IP address, browser type, operating system, and device information.
Google Analytics: We use Google Analytics to understand how users interact with our website. This collects anonymous usage data (e.g., pages visited, session duration) to help us improve the user experience.

3. How We Use Your Information

We use your data for the following purposes:

To Provide the Service: To authenticate you, process your requests (e.g., “Create a blog post”), and display the results.
AI Processing: Your text inputs are transmitted to our AI partners (specifically Google Cloud Vertex AI and Gemini API) solely for the purpose of generating the requested response.
Communication: To send you updates, security alerts, and support messages.
Improvement: To monitor the performance of our specialized agents and fix technical issues.

4. Artificial Intelligence & Data Privacy

Overstaff utilizes advanced AI technologies to function. We prioritize the confidentiality of your business data:

Zero-Retention Agreement: We utilize enterprise-grade APIs via Google Cloud Vertex AI. We operate under a zero-retention policy, meaning that your data (prompts and inputs) is NOT used to train Google’s foundation models. Your business secrets and strategies remain yours.
Data Isolation: The inputs you provide to your virtual employees are used strictly to generate your specific output and are not shared with other customers.

5. Data Retention

Account Data: Retained as long as your account is active.
Input/Output History: We store your chat history and generated results within our secure database to allow you to review past work within the application (e.g., in your “Results” or “History” tab). You may delete specific history items or your entire account at any time.

6. Sharing Your Information

We do not sell your personal data. We share data only with:

Service Providers: Hosting services, payment processors (Paddle, PayPal, Google Pay), and AI API providers necessary to run the app.
Legal Compliance: If required by law, court order, or government regulation.

7. Security

We implement industry-standard security measures, including HTTPS encryption (SSL/TLS) for all data in transit between your browser and our servers. Access to our backend infrastructure is strictly controlled and monitored.

8. Your Data Rights (GDPR)

As we are based in Greece, we fully adhere to the General Data Protection Regulation (GDPR). You have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Correct inaccurate data.
Erasure: Request that we delete your account and all associated data (“Right to be Forgotten”).
Export: Receive your data in a portable format.
Withdraw Consent: Where we rely on your consent to process data, you may withdraw it at any time.

To exercise these rights, please contact us at our support email.

9. Cookies

We use cookies primarily for:

Authentication: To keep you logged in to the app.
Preferences: To remember settings like Dark/Light mode.
Analytics: Google Analytics cookies to track anonymous site usage statistics.

You can control or disable cookies through your browser settings, though this may affect the functionality of the application.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Effective Date” at the top.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: [email protected]
Address: Loutrakiou 47, Athens 173 41, Greece