Privacy Policy
This policy explains how OverShoulder handles information used with the desktop app and Central Platform service.
1. Central Platform request processing
When you use Central Platform mode, your prompt, supplied context, system instructions, and any screen or reference image are relayed transiently through OverShoulder Central to the AI provider you select.
OverShoulder Central does not retain the raw prompt, supplied context, screen or reference image, generated response, or generated image after the request finishes.
We retain the minimum operational records needed to run and protect the service: account and authentication records, credit and billing records, the selected provider and model, separate input and output usage counts, and a keyed one-way request digest for security, accounting, and abuse prevention. The digest is not a copy of the request content.
2. Screen sharing and local data
Screen sharing begins only when you explicitly enable it. A capture can include information visible on your screen, so do not share sensitive information unless you intend to send it for the requested AI assistance.
Memory Box is local-first: its entries and local conversation history remain on your device unless you choose to include information in a request. Memory Box does not provide cloud sync through Central Platform.
3. AI providers and other processors
Your selected AI provider processes the request to generate the response. Provider handling, including any provider retention or training terms, is governed by that provider's policies. Depending on the model and feature you select, providers can include Anthropic, OpenAI, or Google. If paid services are offered, payment processing is provided by Lemon Squeezy under its own policies; OverShoulder does not receive or store your full payment-card number.
4. How we use retained records
We use retained operational records to authenticate accounts, provide and account for credits and billing, prevent fraud and abuse, troubleshoot service reliability, and meet applicable legal obligations. We do not sell raw Central Platform request content for advertising.
5. Security, retention, and choices
Network communications use TLS/HTTPS. No security system can guarantee absolute security. You can manage local conversations and Memory Box data in the app. To request account-data assistance or deletion, contact support@overshoulder.ai.
6. Changes and contact
We may update this policy as the service changes. Material changes will be communicated through the app, email, or this page. Questions can be sent to support@overshoulder.ai.