1. Who is responsible for your data
Overview is an ecommerce research service operated through an individual business established in France. The operator is responsible for the processing described in this policy. For privacy questions or requests, contact us using the address below.
- Legal operator
- Overview Data
- Registration number
- 98940768900011
- Business address
- 4 rue Ange Rubaud, 3e étage, 94230 Cachan, France
2. Information we process
Account information includes your email address, authentication identifier and profile information provided when you register or connect a sign-in provider. Billing information includes your plan, payment status and transaction references; Stripe processes payment details. Support information includes the messages and information you choose to send us.
When optional tracking is enabled, we process activity events, pages visited, device/browser information and identifiers. Advertising measurement may include IP address, approximate location, referrer, click identifiers, browser identifiers, and hashed email for matching registrations or purchases to advertising campaigns. Hashing an email does not make it anonymous. Searches, prompts and uploaded material are also processed to deliver the features you request; avoid submitting sensitive personal information.
3. Purposes and legal bases
We process information necessary to create accounts, provide requested features, manage paid access and respond to support requests to perform our contract with you. We retain information required for accounting and other legal obligations on that basis. Security and fraud prevention may rely on our legitimate interests, subject to your rights and an assessment of necessity and proportionality.
Optional analytics, advertising tracking and optional chat storage are enabled only after your consent. Refusing these categories does not prevent you from using the core service. Accepting the terms of use is separate from consenting to tracking.
5. Service providers and data sharing
Providers receive information needed for their role: Clerk for authentication, Stripe for payments, hosting and database providers for operating the service, and our email delivery provider for service communications. Features using AI may send your submitted queries or material to Groq or OpenAI for processing.
With the relevant consent, PostHog receives analytics events, Crisp receives chat information, and Meta, TikTok, Google Ads or OpenAI advertising receive attribution/conversion information. Advertising providers may process information under their own privacy terms and responsibilities. We do not sell access to your account information as a data product.
6. International processing
Providers may process information outside France or the European Economic Area. Transfers subject to GDPR must use an applicable adequacy decision or appropriate safeguards, such as the European Commission's standard contractual clauses, with additional measures where required. Contact us for information about the destinations and safeguards relevant to your data.
7. Retention and security
Account and saved research information is retained while needed to provide your account and requested services. After closure, information may be retained where required for legal obligations, dispute resolution or security; French accounting records are generally retained for ten years. Analytics, attribution and support information must be limited to the period needed for their purposes and the configured provider retention periods. Contact us for the retention details applicable to your information.
We use access controls and technical safeguards appropriate to the processing. No online service can guarantee absolute security. Deletion requests are assessed across the systems and providers involved; records subject to legal retention may be restricted rather than immediately erased.
8. Your rights and how to exercise them
Where GDPR applies, you may request access, correction, erasure or restriction of your personal data, and portability where applicable. You may object to processing based on legitimate interests and withdraw consent at any time. We may request proportionate information to verify your identity.
We respond within the applicable statutory time limit, normally one month; permitted extensions will be explained. You can also complain to the CNIL (cnil.fr) or another competent data protection authority. These rights are subject to the conditions and exceptions provided by law.
contact@overviewdata.io9. Changes to this policy
We update this policy when our practices or legal requirements change. Significant changes will be brought to your attention through the service or another appropriate channel. A new consent choice will be requested when required.