Privacy Policy

1. Introduction

At Overcast ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered operations engineering platform and services.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address, company details)
• Billing information (processed securely through third-party payment processors)
• Communication data (support tickets, feedback, inquiries)

2.2 Automatically Collected Information

• Log data (IP address, browser type, operating system)
• Usage data (feature usage, performance metrics, incident data)
• Cookies and similar tracking technologies

2.3 Technical and Incident Data

• Application logs and error reports
• System metrics and performance data
• Distributed tracing information
• GitHub integration data (with your permission)

3. How We Use Your Information

• Provide, maintain, and improve our services
• Process transactions and send related information
• Perform root cause analysis and incident resolution
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and security incidents

4. Data Security and Isolation

We implement industry-standard security measures to protect your data:

• Multi-tenant architecture with complete customer isolation
• Row-level security ensuring your data stays yours
• Encryption in transit and at rest
• Regular security audits and compliance certifications (SOC 2 Type II, ISO 27001, ISO 27018)
• HIPAA and FedRAMP compliance options for enterprise customers

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in these circumstances:

• Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, customer support)
• Legal Requirements: When required by law, subpoena, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share specific information

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Retention periods vary by plan:

• Devs & Indies: 7-day history
• Startups & SMBs: 30-day history
• Enterprise: 1-year+ history (customizable)

7. Your Rights

You have the right to:

• Access, update, or delete your personal information
• Object to processing of your personal information
• Request restriction of processing your personal information
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: