FeaturesDocsPricing

Privacy Policy

Last Updated: 5 July 2026


This Privacy Policy explains how GetOverview (getoverview.io), a project and work management application, collects, uses, shares, and protects your information when you use our services. GetOverview provides projects, tasks, wikis, sprints, timesheets and hours, budgets, comments, and AI assistant features. By using GetOverview, you agree to the practices described in this policy.


GetOverview is a sole proprietorship registered in British Columbia, Canada (Registration No. FM1109622), owned and operated by Sandeep Kumar, who is the person responsible for the personal data described in this policy. You can contact us at support@getoverview.io.


We do not sell, rent, or trade your personal data, and we do not use it for advertising or marketing. We share your data only with the sub-processors listed in this policy, with third-party AI tools or clients that you choose to connect to your account, and where required to comply with our legal obligations or to enforce our Terms of Use.


1. Information We Collect

We collect the following categories of information in order to provide and operate the service:

  • Personal Information: information you provide when you sign up and use your account, such as your name, email address, and profile details, together with the organization or workspace you belong to.
  • Content You Provide: the content you create and store in the service, including projects, tasks, wiki pages, comments, time entries and hours, budget data, and files you upload, as well as content ingested from connected meeting and chat integrations such as meeting transcripts and mapped channel messages.
  • Usage Data: technical and diagnostic information generated as you use the service, such as log data, device and browser information, and error and performance diagnostics used to keep the service reliable.
  • Cookies: small data files used for authentication, session management, and essential functionality, as described in the Cookies section below.

2. Third-Party Services and Sub-processors

We rely on a limited set of trusted third-party service providers to operate the service. Each processes data only as needed for the purpose described below. The following list is complete as of the date of this policy.


Infrastructure sub-processors. These providers process data on our behalf to run the service:

  • Convex - cloud application backend providing our primary database, serverless functions, and file and blob storage. Substantially all customer data is stored and processed here. Privacy Policy
  • Clerk - user authentication and identity, including signup, login, session management, and user profile data. Privacy Policy
  • Stripe - payment processing for seat-based subscription billing. Privacy Policy
  • Mailgun - delivery of transactional email, including notifications, password resets, and account communications. Privacy Policy
  • Sentry - application error monitoring and performance diagnostics, including crash and error logs. Privacy Policy
  • OpenAI - AI features processor. Content you submit to AI features is transmitted to the OpenAI API to be processed, as described in the AI Features and Connected AI Tools section below. OpenAI processes this data as an API customer and, under its API data usage policies, does not use API-submitted data to train its models. See the Privacy Policy and the API data usage policies operated by OpenAI.

Optional integrations you connect. When you choose to connect one of the following platforms, we send data to and receive data from a service that you already control under the privacy policy of that platform. Data handled by these platforms is governed by their own privacy policies:

  • Zoom - optional integration. When you connect Zoom, meeting recording transcripts are delivered to GetOverview via Zoom webhooks and processed into project updates. Privacy Policy
  • Slack - optional integration. Sends notifications to Slack and can ingest messages from channels you map to a project. Privacy Policy
  • Microsoft Teams - optional integration. Sends notifications to Teams and can ingest messages from mapped Teams channels. Privacy Policy
  • Google Chat - optional integration. Sends notifications to Google Chat and can ingest messages from mapped Google Chat spaces. Privacy Policy

3. AI Features and Connected AI Tools

GetOverview offers AI-powered features and allows you to connect third-party AI tools to your account. This section explains how those features work and how your data flows to third parties.


AI processing by OpenAI. When you use our AI features, the content you submit is transmitted to the OpenAI API to be processed. This applies to the AI chat assistant and AI agents, semantic search and Retrieval-Augmented Generation embeddings, audio-to-text transcription, AI content generation, and the automated extraction of action items from ingested content (a feature we call inflow). OpenAI processes this data as an API customer and, under its API data usage policies, does not use API-submitted data to train its models. For more information, see the Privacy Policy and the API data usage policies operated by OpenAI.


Connecting third-party AI tools and clients. GetOverview provides a Model Context Protocol (MCP) server, an in-house OAuth 2.1 authorization server that supports Dynamic Client Registration, a public REST API (/api/v1), and Personal Access Tokens (PATs). Third-party AI tools and clients, for example Claude, Cursor, or ChatGPT, can connect to your account through these interfaces.


When you authorize a client, you select one specific workspace (a space) and grant a set of permission scopes on the GetOverview consent screen. GetOverview then issues a token that is bound to that single space and limited to those scopes. Your login identity is verified via Clerk. Once connected, and only within the granted scopes and the chosen space, the connected tool can read and, where write scopes are granted, create or modify your projects, tasks, wiki pages, sprints, comments, time entries and hours, and budget data. Access to budget data requires elevated owner or admin permission.


Important: when you connect a third-party AI tool or client, the project, task, wiki, time-entry, and budget data that the tool requests is transmitted to that third party and is then governed by the privacy policy and terms of that tool, not by GetOverview. You are responsible for reviewing the privacy practices of any AI tool or client you connect. You can revoke access at any time from your account settings.


Token storage and revocation. Access tokens, refresh tokens, and personal access tokens are stored only as SHA-256 hashes. The plaintext token value is shown only once at creation. Tokens are space-scoped, have expirations, support rotation, and can be revoked at any time from account settings.


Automated privacy filtering of ingested content. Content ingested from meeting transcripts and chat integrations, including meeting transcripts and mapped channel messages, passes through an automated privacy filter before it is stored. The filter discards content that consists solely of credentials, API keys, secrets, health information, or financial account details, and redacts incidental personal data such as email addresses and phone numbers.


4. Use of Information

We use the information we collect to:

  • Provide, operate, maintain, and improve the service and its features.
  • Authenticate users and manage accounts, sessions, and workspaces.
  • Process subscription payments and manage seat-based billing.
  • Send transactional communications such as notifications, password resets, and account messages.
  • Power AI features, including the chat assistant, semantic search, transcription, and automated extraction of action items.
  • Enable optional integrations and connected AI tools that you choose to authorize.
  • Monitor, diagnose, and resolve errors and performance issues to keep the service reliable and secure.
  • Comply with our legal obligations and enforce our Terms of Use.

5. Data Privacy and Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, and destruction. Access tokens, refresh tokens, and personal access tokens are stored only as SHA-256 hashes, ingested content consisting solely of credentials or secrets is discarded and incidental personal data is redacted before storage, and access to your data by connected tools is restricted to the specific space and scopes you grant.


We do not sell, rent, or trade your personal data, and we do not use it for advertising or marketing. There are no third-party advertising or analytics trackers in the product. We share your data only with the sub-processors listed above, with the AI tools and clients that you choose to connect, and where required to comply with our legal obligations or to enforce our Terms of Use. No method of transmission or storage is completely secure, and while we work to protect your information, we cannot guarantee absolute security.


6. Cookies

We use cookies for authentication and session management (via Clerk) and for essential functionality of the service. We do not use third-party advertising trackers. You can control cookies through your browser settings, but disabling essential cookies may prevent you from signing in or using core parts of the service.


7. Data Retention

We retain your information only as long as needed to provide the service and to meet our legal obligations. When information is no longer required for these purposes, we take steps to delete it or render it inaccessible.


8. Data Deletion

Items you send to the bin are soft-deleted and retained temporarily so that they can be restored. When you permanently delete an item, the deletion is unrecoverable and also purges the associated AI search and embedding data. There is no recovery after permanent deletion. If you have questions about deleting your data, you can contact us at the address below.


9. International Data Transfers

GetOverview is operated from Canada, and the sub-processors described in this policy may store and process your information in Canada, the United States, and other countries where they or their infrastructure providers operate. These countries may have data-protection laws that differ from those in your country of residence. Where required, we rely on appropriate legal safeguards for such transfers. By using the service, you understand that your information may be transferred to and processed in these locations.


10. Your Rights and Choices

Depending on where you live, you may have rights over your personal data under laws such as the European Union and United Kingdom General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended (CCPA and CPRA), and the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada. Subject to applicable law, these may include the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can access and update much of your information directly in the application, and you can delete data as described in the Data Deletion section. To make a request or ask a question about your rights, contact us at support@getoverview.io. We do not sell your personal data, and we will not discriminate against you for exercising your rights.


11. Limitation of Liability

To the fullest extent permitted by law, and read together with our Terms of Use, GetOverview is not liable for the data practices of any third-party sub-processor, optional integration, or AI tool or client that you choose to connect. Once your data is transmitted to a connected tool or integration, its handling of your data is governed by the privacy policy and terms of that third party, and not by this policy.


12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the Last Updated date at the top of this page. Your continued use of the service after any update constitutes acceptance of the revised policy.


13. Contact

If you have any questions or requests regarding this Privacy Policy or your data, please contact us at support@getoverview.io.