Privacy Notice

Who we are

overlap operates overlap and is the data controller for the personal data described here. Contact us at support@overlap-ai.com.

What we collect and why

• Account data (name, email address, sign-in identifiers from Google or Apple) — to create and secure your account. Legal basis: performance of our contract with you.
• Match requests (the text you approve) and the derived vector embedding — to match you with other users. Legal basis: contract.
• Match and acceptance records — to run introductions only after both sides accept. Legal basis: contract.
• MCP configuration (server URL, connector status, test results) — to help you connect your AI assistant. Legal basis: contract.
• Technical and usage data (IP address, device and browser information, logs, timestamps) — for security, fraud prevention, and improving the product. Legal basis: our legitimate interest in a safe, working service.
• Support messages — to answer you. Legal basis: legitimate interest.

Sensitive information

A match request is whatever you are going through, in your own words, so it may describe your health, a diagnosis or treatment, your beliefs, your sexuality, or another detail the law treats as special category data. We do not ask for any of it and we never infer it. It is there only because you chose to write it, and it is necessary for the one thing overlap does: finding someone in the same situation.

Nothing is stored in the pool until you have read the exact wording and approved it, and you can withdraw a request at any time. That approval is your explicit consent to us processing what it contains and showing it to the person you are matched with. If you would rather not share something, leave it out — a request works without it.

Who we share it with

• Service providers and subprocessors: hosting, database, authentication, and the embedding model provider that turns your request into a vector.
• No payment provider — overlap is free to use and we do not collect or share payment details. If paid plans open, the payment provider handling the sale, subscription management, tax compliance, and invoicing will be named here first.
• Other overlap users — the text of a request you approved reaches someone you are matched with before either of you accepts. Your display name and the contact details you chose to share follow only after both of you accept.
• Professional advisers (legal, accounting) and authorities where required by law.

Retention

Draft requests are kept until you approve, revise, or discard them. Requests in the matching pool are kept until you withdraw them. Account, match, and billing records are kept while your account is active and for as long as needed for legal, tax, and accounting obligations, after which they are deleted or anonymised.

International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

Your rights

Subject to the law where you live, you can request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests, and withdraw consent where we rely on it. Email support@overlap-ai.com and we will respond within one month. If you are in the UK or EEA you may also complain to your local supervisory authority.

Security

We use appropriate technical and organisational measures — encryption in transit, row-level access controls in the database, and scoped credentials — so that each user can only read their own data.

Cookies

We use essential cookies only: to keep you signed in and to remember your sidebar preference. We do not use advertising cookies. You can clear or block cookies in your browser, but sign-in will stop working.