Privacy Policy
Last updated: 28 July 2026
This explains what Overt collects, why, who else touches it, and what you can do about it. It describes the service as actually built, not a template.
Who runs Overt
Overt is built and operated by Aaditya Sadangi, an individual developer based in India — not a registered company. For anything in this policy, including requests about your data, email aadityasadangi@gmail.com. Because Overt is run by one person, that address is also the contact for grievances under India’s Digital Personal Data Protection Act.
What we collect
Account information
Your email address, and a name if you provide one. Sign-in is handled by Clerk — we never see or store your password. If you sign in with Google or another provider, we receive only the basic profile information that provider shares.
What you choose to track
The apps, keywords and competitors you monitor. All of it is public App Store information; what is personal to you is the fact that you chose to track it.
Usage records
How many AI generations you have used against your plan allowance, and your subscription status. These exist to enforce plan limits and, once paid plans launch, to bill correctly.
Technical logs
Our host records IP addresses, request times and errors. These keep the service running and let us investigate faults. IP addresses are also used to rate-limit search, so that one visitor cannot exhaust the shared App Store request budget for everybody else. Kept for about 30 days.
What we deliberately do not collect
- We never ask for your App Store Connect credentials.Overt uses Apple’s public APIs only. Treat anyone who asks for those credentials to do ASO work with suspicion.
- We never see payment card details — the payment processor handles those directly.
- No advertising trackers. We do not sell data to anyone.
Who else processes your data
| Service | What it receives | Why |
|---|---|---|
| Clerk | Email, name, authentication credentials | Sign-in and account management |
| Supabase | Everything above except credentials | Database hosting |
| OpenAI | Public App Store metadata — see below | Generating listing suggestions |
| Vercel | IP addresses, request logs | Hosting the application |
| Paddle | Billing details, email | Taking payment and handling tax, once paid plans launch |
What we send to OpenAI, specifically
When you use generation, we send the public App Store metadata of the app being analysed and of competing apps — titles, descriptions, categories, ratings — plus the keyword you searched. We do not send your email, your name, or any other account information. OpenAI returns listing suggestions and we show them to you.
If you would rather nothing reached OpenAI, simply do not use generation. Search, health scores, rank tracking and competitor monitoring all work without it.
Where your data is stored
The database is hosted in Mumbai, India. Our other providers may process data in the United States and the European Union.
If you are in the EU, EEA, UK or Switzerland, your personal data is therefore stored outside your region, and no formal transfer mechanism such as Standard Contractual Clauses is currently in place. We would rather say that plainly than imply protections that do not exist. If it is not acceptable to you, please do not create an account. This will be addressed before Overt is marketed in the EU.
Why we are allowed to process it
- To provide the service you asked for — running your account, tracking what you told us to track, and taking payment once paid plans exist.
- Legitimate interests — keeping the service working and preventing abuse.
- Legal obligations — keeping billing records where tax law requires it.
How long we keep it
- Account and tracking data: as long as your account exists.
- After you delete your account: erased within 30 days, except records we must keep by law.
- Technical logs: about 30 days.
- Billing records, once paid plans launch: as long as Indian tax law requires.
Accumulated App Store data — rank history, competitor snapshots — is shared across all customers and is not personal data. Deleting your account removes your tracking choices; it does not delete public App Store history.
Your rights
You can ask for a copy of your data, correct it, delete it, export it, object to processing, or withdraw consent. Email aadityasadangi@gmail.com and we will respond within 30 days. You can also delete your account yourself at any time.
If you are in the EU or UK you may complain to your local data protection authority. If you are in India you may raise a grievance at the same address.
Security
Data is encrypted in transit. The database enforces separation between customers at the database level, so one customer cannot read another’s data even if the application has a bug — that boundary is tested rather than assumed. No system is perfectly secure, but this is designed in rather than bolted on.
Children
Overt is a tool for app developers and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes
If this policy changes materially we will update the date above and email account holders before it takes effect.