Privacy Policy

1. Introduction

OverseeX ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent testing and monitoring platform.

We comply with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws. By using OverseeX, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, company name
• Billing Information: Payment method details, billing address (processed by our payment provider)
• Agent Data: AI agent configurations, traces, test results, and monitoring data you submit
• Communications: Support tickets, feedback, and correspondence with us

2.2 Information Collected Automatically

• Usage Data: Features used, actions taken, time spent on platform
• Device Information: Browser type, operating system, IP address
• Cookies: Session identifiers, preferences (see our Cookie Policy)
• Log Data: Server logs, error reports, performance metrics

3. How We Use Your Information

We use collected information for:

• Providing and maintaining the OverseeX platform
• Processing transactions and sending billing-related communications
• Sending technical notices, security alerts, and support messages
• Responding to your comments and questions
• Analyzing usage patterns to improve our services
• Detecting and preventing fraud and abuse
• Complying with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Payment processors, cloud hosting, email services (under strict data processing agreements)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• With Consent: When you explicitly authorize sharing

5. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Withdraw Consent: Revoke previously given consent

To exercise these rights, email us at privacy@overseex.com or use the Data Control settings in your account.

6. Data Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• SOC 2 Type II compliance (Enterprise tier)
• Multi-factor authentication support
• Role-based access controls

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Retention periods vary by plan:

• Free tier: 7 days trace retention
• Starter: 14 days trace retention
• Pro: 30 days trace retention
• Team: 60 days trace retention
• Enterprise: Up to 1 year (customizable)

Upon account deletion, we retain data for 30 days (recovery period), then permanently delete it within 90 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards through Standard Contractual Clauses (SCCs) and other legally recognized transfer mechanisms.

9. Children's Privacy

OverseeX is not intended for users under 16. We do not knowingly collect personal information from children. If we discover such data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries or to exercise your rights: