Privacy Policy
This policy explains how OverShoulder handles information used with the desktop app and Central Platform service.
1. Central Platform request processing
When you use Central Platform mode, your prompt, supplied context, system instructions, and any screen or reference image are relayed transiently through OverShoulder Central to the AI provider you select.
OverShoulder Central does not retain the raw prompt, supplied context, screen or reference image, generated response, or generated image after the request finishes.
We retain the minimum operational records needed to run and protect the service: account and authentication records, credit and billing records, the selected provider and model, separate input and output usage counts, and a keyed one-way request digest for security, accounting, and abuse prevention. The digest is not a copy of the request content.
Security log. To protect accounts and prevent abuse, we record security events such as sign-ins, failed sign-in attempts, password-reset requests, and blocked or suspicious requests, together with the IP address each came from. We keep IP addresses in this log for 30 days and then delete them; after that, we may keep only the country and network provider. Only OverShoulder administrators can see this log, and we use it only for security, fraud prevention, and troubleshooting.
2. Screen sharing and local data
Screen sharing begins only when you explicitly enable it. A capture can include information visible on your screen, so do not share sensitive information unless you intend to send it for the requested AI assistance.
Memory Box is local-first: its entries and local conversation history remain on your device unless you choose to include information in a request. Memory Box does not provide cloud sync through Central Platform.
3. Service providers
We use the service providers below to run OverShoulder. Each receives only the information its job needs and processes it for us under its own terms and data processing agreement.
- AI model providers: Anthropic, OpenAI and Google. When you send a request, your prompt, supplied context, system instructions, and any screen or reference image go to the provider of the model you selected, which generates the response. Each provider's retention and training terms are described in its own policies.
- Answer checks for role twins: TypeSafe. If you use role twins, the text of each role twin answer is sent to TypeSafe to check whether the answer presents itself as a person or makes a promise on the company's behalf. If TypeSafe is unavailable or unsure, Google's Gemini model performs the same check.
- Web search: Tavily. When an answer needs a web search, the selected AI provider searches first; if that finds no cited answer, the search query is sent to Tavily.
- Hosting: Google Cloud. Central Platform's servers and database run on Google Cloud in the United States and hold the records described in section 1.
- Email delivery: Resend. Your email address and the content of service emails, such as verification codes.
- Product analytics: Mixpanel. Your email address, language, preferred model, app version and operating system, and usage events such as signing in, sending a message (its length, not its content), switching models, and starting screen sharing. Mixpanel is set not to use your IP address for location. You can turn analytics off in Settings > Analytics.
- Error reports: Sentry. Technical details when the app or Central Platform hits an error or runs slowly, such as the error message, where in the code it happened, the app version, and the device type. Central Platform strips its reports to technical details and sends no request content.
- Payments: Lemon Squeezy. Payment processing as our merchant of record, under its own policies. OverShoulder does not receive or store your full payment-card number.
4. Transfers outside your country
The providers in section 3 process information in the United States. Some may also process it in other countries where they or their subprocessors operate, as their terms describe. When you use a feature, the information it needs is sent to that provider at that time over an encrypted connection (TLS).
| Recipient and contact | Country | Information | Purpose | Retention |
|---|---|---|---|---|
| Anthropic, PBC privacy@anthropic.com | United States | Prompts, supplied context, instructions, screen or reference images, and responses, when you use a Claude model | Generate the response | Deleted within 30 days by default; longer only when flagged for a usage-policy review or required by law |
| OpenAI OpCo, LLC privacy@openai.com | United States | The same, when you use an OpenAI model | Generate the response | Up to 30 days for abuse monitoring; we ask OpenAI not to store responses |
| Google LLC Google Cloud privacy contact form | United States | The same, when you use a Gemini model; role twin answer text when Gemini checks an answer; the records in section 1 (hosting) | Generate responses and check answers; host Central Platform | Gemini: up to 55 days for abuse monitoring. Hosting: as described in section 1 |
| Typesafe AI, Inc. privacy@typesafe.ai | United States | The text of role twin answers | Check answers (role twins only) | Only as long as the check needs, under its data processing agreement; not used for training |
| AlphaAI Technologies Inc. d/b/a Tavily support@tavily.com | United States | Web search queries, when the AI provider's own search finds no cited answer | Return web search results | While our Tavily account exists; we have turned off its use of our queries to improve its service |
| Mixpanel, Inc. compliance@mixpanel.com | United States | Email address, language, preferred model, app version, operating system, and usage events | Understand which features are used and improve the app | Events up to 5 years; profile data while our Mixpanel account is active |
| Functional Software, Inc. d/b/a Sentry compliance@sentry.io | United States | Technical error and performance details, app version, and device type | Find and fix errors | Up to 90 days |
| Plus Five Five, Inc. (Resend) privacy@resend.com | United States | Email address and the content of service emails | Send service emails | 30 days |
| Sold through Link, LLC f/k/a Lemon Squeezy LLC hello@lemonsqueezy.com | United States | Email address and account ID, and the details you enter at checkout | Take payments as our merchant of record | While our account with it exists, and longer where tax or accounting law requires |
For users in the European Economic Area, the United Kingdom and Switzerland, these transfers rely on the Standard Contractual Clauses in each provider's data processing terms.
Refusing a transfer. You can avoid a provider by not using its feature: choose a model from another provider, turn analytics off in Settings > Analytics, or do not use web search or role twins. Central Platform itself runs in the United States, so it cannot be used without that transfer; without it, Central Platform features are unavailable. To ask about or object to a transfer, contact support@overshoulder.ai.
5. How we use retained records
We use retained operational records to authenticate accounts, provide and account for credits and billing, prevent fraud and abuse, troubleshoot service reliability, and meet applicable legal obligations. We use analytics to understand which features are used and to improve the app. We do not sell raw Central Platform request content for advertising.
6. Security, retention, and choices
Network communications use TLS/HTTPS. No security system can guarantee absolute security. You can manage local conversations and Memory Box data in the app, and turn analytics off in Settings > Analytics. To request account-data assistance or deletion, contact support@overshoulder.ai.
7. Changes and contact
We may update this policy as the service changes. Material changes will be communicated through the app, email, or this page. Questions can be sent to support@overshoulder.ai.