Privacy Policy

Introduction

Welcome to OverSkill ("we," "our," or "us"). OverSkill is an AI-powered platform that enables users to create custom web applications through natural language descriptions. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Services").

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Services.

Information We Collect

Personal Information You Provide

We collect information you voluntarily provide, including:

• Account Information: Name, email address, password, and profile details when you create an account
• Payment Information: Billing address and payment card details (processed securely by Stripe)
• App Content: Descriptions, prompts, and content you provide to generate applications
• Communications: Messages when you contact our support team
• OAuth Data: Profile information from third-party services (Google, GitHub) when you choose to sign in with them

Information Collected Automatically

When you use our Services, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Log Data: IP address, browser type, access times, and referring URLs
• Analytics: App performance metrics using Cloudflare Analytics Engine
• Push Notification Tokens: Device tokens for delivering push notifications (iOS and Android)

Information from Generated Apps

When you create and deploy applications using OverSkill, we may collect analytics about how those apps are used (page views, sessions, errors) to provide you with insights and enable billing for integrated services.

How We Use Your Information

We use the information we collect to:

• Provide Services: Create and host your applications, process requests, and deliver features
• AI Processing: Generate application code and components using AI services (Anthropic Claude, Google Gemini)
• Account Management: Create and manage your account, authenticate users, and provide customer support
• Billing: Process payments and manage subscriptions through Stripe
• Communications: Send service updates, security alerts, and (with your consent) marketing communications
• Analytics: Understand usage patterns to improve our Services
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with applicable laws and regulations

AI Services and Data Processing

OverSkill uses third-party AI services to generate application code based on your descriptions. When you submit prompts:

• Your prompts are sent to AI providers (Anthropic, Google) for processing
• These providers process your data according to their own privacy policies
• Generated code becomes part of your application and is stored in our systems
• We do not use your prompts or generated content to train our own AI models

Important: Do not include sensitive personal information, passwords, API keys, or confidential business data in your prompts.

Information Sharing and Disclosure

We may share your information with:

Service Providers

• Cloudflare: Hosting, CDN, and analytics services
• Stripe: Payment processing
• Supabase: Database and authentication services
• Anthropic & Google: AI processing services
• Render: Application hosting
• Apple (APNs): Push notification delivery for iOS

Other Disclosures

We may also disclose information:

• To comply with legal obligations or respond to lawful requests
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets
• With your consent or at your direction

Data Retention

We retain your information for as long as necessary to:

• Account data: Until you delete your account, plus a reasonable period for backups
• Application data: Until you delete your applications or account
• Usage logs: Up to 90 days for operational purposes
• Analytics data: Up to 30 days in Cloudflare Analytics Engine
• Billing records: As required by law (typically 7 years)

Your Rights and Choices

Depending on your location, you may have rights to:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Export: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restrict Processing: Limit how we use your data in certain circumstances

To exercise these rights, contact us at [email protected].

Push Notifications

Our mobile applications may request permission to send push notifications. You can control these through:

• iOS: Settings > Notifications > OverSkill
• Android: Settings > Apps > OverSkill > Notifications

We use push notifications to alert you about app deployments, build completions, and important account updates.

Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Secure password hashing using industry-standard algorithms
• Regular security assessments and updates
• Access controls and authentication requirements
• Infrastructure hosted on enterprise-grade platforms (Cloudflare, Render, Supabase)

International Transfers

Your information may be transferred to and processed in countries other than your country of residence. We use appropriate safeguards for international transfers, including standard contractual clauses where required.

Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe we have information about a child under 13, please contact us.

Cookies and Tracking

We use essential cookies for authentication and session management. Our analytics use Cloudflare Analytics Engine, which does not use cookies or track users across websites. We do not engage in cross-app or cross-site tracking as defined by Apple's App Tracking Transparency framework.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We may also notify you via email or through our Services for significant changes.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Platform-Specific Disclosures

For App Creators (Our Customers)

When you create applications using OverSkill, you become the data controller for your end users' data. You are responsible for:

• Providing your own privacy policy to your end users
• Obtaining necessary consents for data collection in your apps
• Complying with applicable laws for your end users' data

OverSkill acts as a data processor for end user data in generated applications. Contact us for our Data Processing Agreement.