Privacy Policy

1. Introduction

OVRLRD (ovrlrd.io) is operated by Aeocraft LLC, part of the QOL network. OVRLRD ("we," "us," or "our") operates the website ovrlrd.io and its associated services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information: You sign in to OVRLRD with QOL ID (id.qol.one), the QOL network's sign-in service, which is also operated by Aeocraft LLC. When you sign in, QOL ID confirms your email address to us, and we store that email address to identify your OVRLRD account. OVRLRD never receives or stores a password. How QOL ID handles your sign-in is explained in the QOL ID Privacy Policy.

Generated Content (Tool Inputs & Outputs): OVRLRD generates marketing copy from information you enter — such as product or service descriptions, target-audience details, brand names, tone preferences, and pricing. These inputs, together with the AI-generated outputs, are stored in your private output history, accessible only to your account. You are responsible for the content you submit; please do not enter another person's sensitive personal information into the tools.

Support Chat: If you use the in-app support chat, the messages you send are processed by our AI providers (Anthropic, with Google as a fallback) to generate a response.

Usage Data: We log which tools you use and how many times per day in order to enforce plan limits and improve the Service. We also process standard server logs (such as IP address and request metadata) generated by our hosting provider for security and operational purposes.

Subscription & Billing Data: We store your subscription tier and the identifiers needed to associate your account with your Stripe customer record. All card and financial account details are collected and stored by Stripe — never on our servers.

Referral Information: If you participate in our referral program, we generate a referral code linked to your account and track referred sign-ups and purchases to calculate commissions. Referral notifications may display the email address of a person who signed up through your link.

White-Label Configuration: If you use the white-label feature, we store the branding you configure (brand name, portal slug, logo URL, colors, and headlines). White-label portals are published at a public URL you choose.

Marketing & Lead Information: When you sign up, or when you submit your email through a landing-page or exit-intent form, we store your email address (and name, if provided) and the source of the submission so we can send you marketing communications about OVRLRD. See Sections 3 and 5 for how this data is used and shared.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service and generate AI content from your inputs
• Create and store your private output history
• Enforce usage limits based on your subscription tier
• Process payments and manage subscriptions via Stripe
• Send transactional emails (welcome, upgrade and purchase confirmations, referral notifications)
• Send marketing emails about OVRLRD, including via our email-outreach provider (you may opt out at any time)
• Operate the referral program and calculate commissions
• Power white-label portals you configure
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations

Where required by law (for example, in the EEA and UK), our legal bases for processing are: performance of our contract with you (to provide the Service), your consent (for marketing communications, which you can withdraw at any time), and our legitimate interests (to secure, maintain, and improve the Service and prevent abuse).

4. Cookies and Site Content

We use only these first-party cookies:

• ovr_session — keeps you signed in; set when you sign in; lasts 30 days
• ovr-qol-verifier, ovr-qol-state and ovr-qol-redirect — complete a sign-in securely; set only when you start signing in; last 10 minutes
• ovrlrd_ref — credits a referral when you arrive through a referral link; lasts 30 days

Visiting OVRLRD without signing in or following a referral link sets no cookies. We do not use advertising, analytics or cross-site tracking cookies. We do not sell your personal information or share it for cross-context behavioral advertising.

Site content: Each page also loads its current text from the QOL network's content service, which Aeocraft LLC runs on Supabase, and loads the QOL network button from qol.one. These requests carry standard technical data such as your IP address and browser type. No cookies or account details are sent with them.

5. Third-Party Services

We rely on the following third-party service providers (sub-processors) to operate the Service. Each receives only the data needed to perform its function and processes it under its own privacy terms:

• Cloudflare (D1 database and Workers) — database hosting (stores account, usage, output history, referral, white-label, and lead data)
• Stripe — payment processing and subscription billing (handles all card and financial data)
• Anthropic (Claude API) — our primary AI provider; processes your tool inputs and support-chat messages to generate AI outputs
• Google (Gemini / Generative AI API) — fallback AI provider; processes the same inputs only when Claude is unavailable
• MailerSend — delivery of transactional emails
• Instantly (Instantly.ai) — email-outreach platform used to send marketing communications to sign-ups and leads
• Vercel — web hosting and infrastructure (processes server request logs)
• Supabase — hosts the QOL network content service that each page loads its text from (see Section 4)

6. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• With the third-party service providers listed in Section 5, to operate the Service on our behalf
• When required by law, subpoena, or other legal process, or to protect the rights, property, or safety of OVRLRD, our users, or the public
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in ownership or use of your personal information

7. Data Retention

We retain your account data, output history, and related records for as long as your account is active. If you delete your account, we will delete the associated personal information within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention, tax, and accounting (billing records may be retained by Stripe and by us as required). Marketing and lead records are retained until you unsubscribe or request deletion.

8. Your Rights (GDPR / EEA & UK)

If you are located in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your account and associated data (right to be forgotten)
• Object to or request restriction of certain processing
• Withdraw consent to marketing at any time, without affecting prior processing
• Receive a copy of your data in a portable, machine-readable format (data portability)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at the email in Section 13. We will respond within the timeframe required by applicable law.

9. Your Rights (CCPA / California)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect, use, and disclose
• Access the specific personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information, subject to legal exceptions
• Opt out of the sale or sharing of personal information — note that we do not sell or share your personal information
• Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at the email in Section 13. You may use an authorized agent to submit a request on your behalf. We will not discriminate against you for exercising any of your rights.

10. Data Location, International Transfers & Security

OVRLRD is operated from the United States. Some of our service providers (for example, our email providers) may process data in the European Union or other jurisdictions. As a result, your information may be transferred to and processed in countries whose data-protection laws differ from those of your country. Where such transfers occur, we rely on our providers' safeguards, such as standard contractual clauses, to protect your data.

We use industry-standard security measures including encrypted connections (SSL/TLS), signed httpOnly session cookies, and a data service that accepts requests only from our own servers and limits every account request to the signed-in account, so each account can reach only its own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is intended only for individuals aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "last updated" date. Continued use of the Service after changes constitutes acceptance.

13. Contact

For privacy-related inquiries, or to exercise any of the rights described above, contact us at: support@qol.one

Operator of record: Aeocraft LLC (part of the QOL network). This policy is governed by the laws of the United States and the State of Illinois.