This Privacy Policy explains how Overmn (“Overmn”, “we”, “us”) collects, uses, and shares information when you use our website, web app, and Chrome extension (collectively, the “Services”).
What we collect
Account and profile information
- Email address and account identifiers (via Supabase Auth).
- Optional profile data you provide (for example, full name).
- Preferences such as language preference (e.g. English or Spanish).
Business context you provide (to improve suggestions)
If you choose to provide it in the web app, we store business context to help personalize sales assistance, such as:
- Company name and company description.
- Product/service description.
- Ideal customer profile and buyer persona.
- Products/services list and pricing information.
Call and usage data
The Services are designed for call workflows. Depending on what you use, we may store:
- Call start/end time and duration.
- Call outcome and “objections detected” counts.
- VoIP system name and external call identifiers (if available).
- Notes you add.
- Transcripts (stored as structured transcript segments with speaker and timestamps).
- A recording URL, if your workflow provides one (we store the URL field when supplied).
Subscription and billing information
If you purchase a subscription, billing is processed by Stripe. We store limited billing-related identifiers and subscription state, such as:
- Stripe customer ID and subscription ID.
- Current billing period start/end and subscription status.
- Subscription history events (e.g., renewals/minutes refills) and related metadata.
Stripe may collect additional information to process payments (for example, payment method details). We do not store full payment card numbers.
Analytics and diagnostic data
- Website analytics (for example, via Vercel Analytics) to understand usage and improve performance.
- Basic server logs and security signals (for example, request metadata) to protect the Services.
Chrome extension permissions (and why)
The Overmn Chrome extension requests the following permissions to enable in-call assistance. Your browser will also provide permission prompts where applicable.
- storage — Store user preferences, conversation history, AI settings, and authentication tokens so your configuration persists across sessions.
- activeTab — Interact with the currently active tab where a VoIP sales call is taking place to detect call context and state.
- scripting — Inject scripts on supported call pages to capture call metadata, monitor flow, and display suggestions in the call interface.
- tabCapture — Capture audio from a browser tab to analyze VoIP call audio for real-time assistance.
- tabs — Access tab information and lifecycle events to monitor sales-related tabs and coordinate functionality across tabs.
- notifications — Show notifications for important events such as suggestions or call alerts.
- offscreen — Perform background processing (e.g., audio analysis and computations) without a visible tab.
Authentication tokens shared with the extension
If you sign in through the web app via an extension-initiated login flow, the web app may send authentication tokens to the extension so the extension can access your account. The extension may store these tokens using browser storage.
How we use information
- Provide the Services (account access, call features, transcripts/notes, and dashboards).
- Personalize assistance using the business context you provide.
- Track usage and enforce limits (for example, minutes and subscription status).
- Billing and account administration (creating customer records, managing subscriptions).
- Security and fraud prevention, including verifying tokens for protected API requests.
- Improve and debug the Services (for example, aggregate analytics and diagnostics).
How we share information
We may share information with:
- Service providers that help us operate the Services, such as Supabase (authentication and database), Stripe (billing), and our hosting/analytics providers.
- Legal and safety recipients when required by law or to protect Overmn, our users, or the public.
- Business transfers if we’re involved in a merger, acquisition, or asset sale.
We do not sell your personal information in the ordinary sense of “selling” for money. If your jurisdiction provides specific definitions (e.g., “sale” or “share” under certain privacy laws), your rights are described below.
Data retention
We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention may vary by data type (for example, subscription records may be retained for accounting and audit purposes).
Your choices and rights
- Access and update: You can update certain profile details in the app.
- Delete: You can request deletion of your account and associated data by contacting us.
- U.S. privacy rights: Depending on where you live, you may have rights to request access to, deletion of, or correction of certain personal information, or to opt out of certain processing. To submit a request, contact us at contact@softex.mx.
- Extension storage: You can clear extension data via your browser’s extension settings or by uninstalling the extension.
Security
We use reasonable administrative, technical, and physical safeguards to protect information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
In the event of a security incident affecting your information, we will take steps we believe are reasonable to investigate and remediate the incident and provide notices when and as required by applicable law.
Children’s privacy
The Services are not directed to children, and we do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above.
Contact
If you have questions or requests about this Privacy Policy, contact us at contact@softex.mx.