PRIVACY POLICY

Welcome to OverArc ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information.

This Privacy Policy explains our practices regarding the collection, use, and disclosure of personal data when you use our SMS automation services, visit our website (https://overarc.co), or interact with us in any way.

By using our services or providing us with your information, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

Company Name: OverArc

Owner: Shabir Ahmad

Contact Email: shabir@overarc.co

Website: https://overarc.co

3.1 Personal Information You Provide

We collect information that you voluntarily provide to us when:

• Contacting us (email, WhatsApp, phone calls)
• Booking a demo call (name, email, phone, company)
• Signing up for our services (business details, phone numbers, CRM access)
• Submitting forms on our website
• Corresponding with us via any channel

Types of Personal Information:

• Name
• Email address
• Phone number
• Company name
• Business address
• Job title
• Payment information (for billing)
• Website URL
• Phone system access (for SMS recovery setup)

3.2 Information Collected Automatically

When you visit our website, we may collect:

• Device information: IP address, browser type, operating system
• Usage data: Pages visited, time spent, click patterns
• Cookies: See Section 7 for details
• Analytics data: Google Analytics (see Section 7)

3.3 Information from Third Parties

We may receive information from:

• Cold email tools (Instantly, Apollo) – business contact information
• CRM integrations (HubSpot, Salesforce, GoHighLevel) – lead data you authorize
• Phone systems (Twilio) – call logs, SMS data (only for clients we build for)
• Payment processors (Stripe) – billing information

We use the information we collect for the following purposes:

4.1 Service Delivery

• Build and deploy SMS lead recovery workflows for clients
• Set up Twilio phone numbers and webhooks
• Integrate with your CRM, calendar, and other tools
• Monitor and maintain your automation systems
• Troubleshoot issues and provide support

4.2 Business Operations

• Respond to your inquiries and requests
• Schedule and conduct demo calls
• Send project updates and maintenance notifications
• Process payments and manage billing
• Maintain business records

4.3 Marketing (With Your Consent)

• Send newsletters or promotional emails (you can opt-out)
• Share case studies and testimonials (with your permission)
• Follow up on demo calls

4.4 Analytics & Improvement

• Analyze website usage to improve our services
• Understand customer needs and preferences
• Measure service performance

4.5 Legal & Compliance

• Meet legal obligations (tax, accounting)
• Protect our rights and property
• Prevent fraud or misuse of our services

5.1 We DO NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties.

5.2 We Share Information With:

Service Providers (Only when necessary for your service):

• Twilio: For phone/SMS services (your call data flows through Twilio)
• Google: For Sheets, Calendar, Gemini AI (your lead data stored in Google)
• Stripe: For payment processing (billing information)
• Railway: For n8n hosting (workflow data)
• GoHighLevel: For CRM integration (lead data you authorize)

Legal Requirements:

• If required by law, court order, or government regulation
• To protect our rights, safety, or property
• To prevent fraud or security issues

With Your Consent:

• If you explicitly agree to share information (e.g., testimonial, case study)

6.1 Where We Store Data

• Client Automation Data: Stored in Google Sheets, Google Calendar, Twilio (cloud-based)
• Business Contact Data: Stored in CRM, email (cloud-based)
• Payment Data: Stored by Stripe (encrypted, PCI-compliant)
• Website Data: Stored on hosting servers

6.2 Security Measures

We implement reasonable security measures to protect your information:

• Encryption: Data transmitted via HTTPS (encrypted)
• API Keys: Stored securely in n8n (not exposed publicly)
• Access Control: Only authorized team members access client data
• Backups: Automated backups of Google Sheets data
• Password Protection: Accounts secured with strong passwords

6.3 Limitations

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7.1 Cookies We Use

Google Analytics:

• Tracks website visitors (anonymous data)
• Measures page views, bounce rate, session duration
• You can opt-out: Install Google Analytics Opt-out

Microsoft Clarity:

• We capture behavior metrics, heatmaps, and session replays to improve our services and user experience.
• Data is captured using first and third-party cookies and other tracking technologies.
• By using our site, you agree that we and Microsoft can collect and use this behavioral data.
• For more details on how Microsoft collects and uses your data, see the Microsoft Privacy Statement.

Depending on your location, you may have the following rights:

8.1 Access, Correction, and Deletion

• Request a copy, correct, or delete your personal data we hold
• How: Email shabir@overarc.co

8.2 Opt-Out

• Stop receiving marketing emails (click "unsubscribe" in email)
• Stop cookies (see Section 7)

9.1 How Long We Keep Data

• Client Automation Data: Kept indefinitely while service is active, and for 30 days following service cancellation.
• Business Contact Data: Kept for 2 years after last contact
• Billing Data: Kept for 7 years (tax/legal requirements)
• Website Analytics: Kept for 14 months (Google Analytics default)

We ensure appropriate safeguards for international transfers by using secure providers (Google, Twilio, Stripe) and standard data protection clauses.

Our services are NOT intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12.1 SMS Recovery Clients

If we build an SMS lead recovery system for you, we access call logs, SMS messages, lead info, and CRM data strictly as a data processor to configure and run the service. All data belongs to you.