Privacy Policy

1. Introduction

OVRLRD (ovrlrd.io) is operated by Aeocraft LLC, part of the QOL network. OVRLRD ("we," "us," or "our") operates the website ovrlrd.io and its associated services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information: When you register, we collect your email address and a password. Passwords are stored in hashed form by our authentication provider (Supabase); we never store or have access to your plaintext password. If you provide a name, we store it to personalize emails and your account.

Generated Content (Tool Inputs & Outputs): OVRLRD generates marketing copy from information you enter — such as product or service descriptions, target-audience details, brand names, tone preferences, and pricing. These inputs, together with the AI-generated outputs, are stored in your private output history, accessible only to your account. You are responsible for the content you submit; please do not enter another person's sensitive personal information into the tools.

Support Chat: If you use the in-app support chat, the messages you send are processed by our AI provider (Google) to generate a response.

Usage Data: We log which tools you use and how many times per day in order to enforce plan limits and improve the Service. We also process standard server logs (such as IP address and request metadata) generated by our hosting provider for security and operational purposes.

Subscription & Billing Data: We store your subscription tier and the identifiers needed to associate your account with your Stripe customer record. All card and financial account details are collected and stored by Stripe — never on our servers.

Referral Information: If you participate in our referral program, we generate a referral code linked to your account and track referred sign-ups and purchases to calculate commissions. Referral notifications may display the email address of a person who signed up through your link.

White-Label Configuration: If you use the white-label feature, we store the branding you configure (brand name, portal slug, logo URL, colors, and headlines). White-label portals are published at a public URL you choose.

Marketing & Lead Information: When you sign up, or when you submit your email through a landing-page or exit-intent form, we store your email address (and name, if provided) and the source of the submission so we can send you marketing communications about OVRLRD. See Sections 3 and 5 for how this data is used and shared.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service and generate AI content from your inputs
• Create and store your private output history
• Enforce usage limits based on your subscription tier
• Process payments and manage subscriptions via Stripe
• Send transactional emails (welcome, upgrade and purchase confirmations, password resets, referral notifications)
• Send marketing emails about OVRLRD, including via our email-outreach provider (you may opt out at any time)
• Operate the referral program and calculate commissions
• Power white-label portals you configure
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations

Where required by law (for example, in the EEA and UK), our legal bases for processing are: performance of our contract with you (to provide the Service), your consent (for marketing communications, which you can withdraw at any time), and our legitimate interests (to secure, maintain, and improve the Service and prevent abuse).

4. Cookies and Tracking

We use first-party session cookies solely to keep you signed in and maintain your authentication state. We do not use third-party advertising or cross-site tracking cookies. We do not sell your personal information or share it for cross-context behavioral advertising.

5. Third-Party Services

We rely on the following third-party service providers (sub-processors) to operate the Service. Each receives only the data needed to perform its function and processes it under its own privacy terms:

• Supabase — database hosting and user authentication (stores account, usage, output history, referral, white-label, and lead data)
• Stripe — payment processing and subscription billing (handles all card and financial data)
• Google (Gemini / Generative AI API) — processes your tool inputs and support-chat messages to generate AI outputs
• MailerSend — delivery of transactional emails
• Instantly (Instantly.ai) — email-outreach platform used to send marketing communications to sign-ups and leads
• Vercel — web hosting and infrastructure (processes server request logs)

6. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• With the third-party service providers listed in Section 5, to operate the Service on our behalf
• When required by law, subpoena, or other legal process, or to protect the rights, property, or safety of OVRLRD, our users, or the public
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in ownership or use of your personal information

7. Data Retention

We retain your account data, output history, and related records for as long as your account is active. If you delete your account, we will delete the associated personal information within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention, tax, and accounting (billing records may be retained by Stripe and by us as required). Marketing and lead records are retained until you unsubscribe or request deletion.

8. Your Rights (GDPR / EEA & UK)

If you are located in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your account and associated data (right to be forgotten)
• Object to or request restriction of certain processing
• Withdraw consent to marketing at any time, without affecting prior processing
• Receive a copy of your data in a portable, machine-readable format (data portability)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at the email in Section 12. We will respond within the timeframe required by applicable law.

9. Your Rights (CCPA / California)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect, use, and disclose
• Access the specific personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information, subject to legal exceptions
• Opt out of the sale or sharing of personal information — note that we do not sell or share your personal information
• Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at the email in Section 12. You may use an authorized agent to submit a request on your behalf. We will not discriminate against you for exercising any of your rights.

10. Data Location, International Transfers & Security

OVRLRD is operated from the United States. Some of our service providers (for example, our email providers) may process data in the European Union or other jurisdictions. As a result, your information may be transferred to and processed in countries whose data-protection laws differ from those of your country. Where such transfers occur, we rely on our providers' safeguards, such as standard contractual clauses, to protect your data.

We use industry-standard security measures including encrypted connections (SSL/TLS), hashed passwords, and row-level security on our database to restrict each account to its own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is intended only for individuals aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "last updated" date. Continued use of the Service after changes constitutes acceptance.

13. Contact

For privacy-related inquiries, or to exercise any of the rights described above, contact us at: support@qol.one

Operator of record: Aeocraft LLC (part of the QOL network). This policy is governed by the laws of the United States and the State of Illinois.