Privacy Policy for Overhyped AI


Last Updated: May 21, 2025


This Privacy Policy describes how Overhyped AI ("We," "Us," or "Our") collects, uses, discloses, and protects personal data when you interact with our services, including our AI voice agent platform, website (https://www.overhyped.ai), and related tools (collectively, "Services"). By using our Services, you agree to the terms outlined below.


1. Definitions


Account: A unique profile created to access Our Services.
End User: Individuals who interact with Our AI voice agent through a subscriber’s platform.
Personal Data: Information that identifies or relates to a natural person (e.g., name, voice recordings, payment details).
Processing: Any operation performed on Personal Data (e.g., collection, storage, analysis).
Services: Overhyped AI’s voice agent platform, website, and related tools.
Subscriber: The entity (business or individual) that subscribes to Our Services.
User: Anyone interacting with Our Services, including Subscribers, End Users, and website visitors.


2. Data Collection and Use


2.1 Data Provided Directly by You


Subscribers:

Data collected includes full name, email, billing address, payment details, and company information. The purpose of collecting this data is for account creation, payment processing, service delivery, and customer support. This data may be shared with payment processors (Stripe, PayPal), cloud hosting providers (AWS), and CRM integrations.


End Users:

Data collected includes voice recordings, interaction logs, and device information (OS, browser). The purpose of collecting this data is to deliver AI-driven onboarding/support, improve voice agent performance, and for analytics. This data may be shared with AI model training partners, analytics platforms (Google Analytics), and the subscriber’s CRM.


Website Visitors:

Data collected includes IP address, cookies, session activity, and contact form submissions. The purpose of collecting this data is to support website functionality, perform analytics, conduct marketing, and respond to inquiries. This data may be shared with marketing tools (HubSpot) and cookie management platforms (OneTrust).


Demo/Trial Users:

Data collected includes name, email, phone number, and company details. The purpose of collecting this data is to provide product demonstrations and evaluate trial eligibility. This data may be shared with sales automation tools (Salesforce) and communication platforms (Twilio).


Job Applicants:

Data collected includes resume, employment history, education, and references. The purpose of collecting this data is to evaluate candidacy for open roles. This data may be shared with HR management systems (Greenhouse) and background check providers.


2.2 Data Collected Automatically

  • Voice Interaction Data: Call recordings, transcriptions, and metadata (e.g., call duration, sentiment analysis) to improve AI accuracy.
  • Usage Analytics: Feature adoption rates, error logs, and session heatmaps to optimize service performance.
  • Device/Technical Data: Browser type, operating system, and IP address for security monitoring and compatibility fixes.


3. Data Sharing and Disclosure


We share Personal Data with:

  • Subscribers: End User interaction data is shared with Subscribers to facilitate onboarding/adoption metrics.
  • Service Providers: Payment processors (Stripe), cloud hosts (AWS), and AI training partners under strict confidentiality agreements.
  • Legal Authorities: To comply with lawful requests, court orders, or regulatory requirements.
  • Business Transfers: In mergers, acquisitions, or asset sales, with guarantees of continued privacy compliance.


We do not sell Personal Data to third parties for marketing purposes.


4. International Data Transfers


Data may be transferred globally, including to the U.S., India, and EU-based servers. Transfers adhere to:

  • GDPR: Standard Contractual Clauses (SCCs) for EU/UK data.
  • CCPA/CPRA: Limits on "selling/sharing" California residents’ data.


5. Legal Basis for Processing (GDPR/UK)


Contractual Necessity:

Use cases under this basis include providing services, processing payments, and enforcing Terms of Use.


Legitimate Interest:

This basis covers use cases such as fraud prevention, service improvements, and marketing (with opt-out options).


Consent:

This applies to optional data uses (e.g., newsletters, beta testing).


6. California Privacy Rights (CCPA/CPRA)


California residents may:

  • Opt out of data "sales" (though We do not sell data).
  • Request deletion of Personal Data, excluding legally retained records.
  • Access a report detailing data categories collected in the past 12 months.


Submit requests to activate@overhyped.ai.


7. Security Measures


  • Encryption: Voice recordings and payment data encrypted in transit (TLS 1.2+) and at rest (AES-256).
  • Access Controls: Role-based permissions and audit logs for employee/data contractor access.
  • Incident Response: 24/7 monitoring and breach notification within 72 hours of detection.


8. Data Retention


Voice Recordings:

Retention period is 90 days (or longer if required by Subscriber contract).


Payment Information:

Retained until subscription termination plus 7 years for tax compliance.


Analytics Data:

Retained for 3 years (aggregated/anonymized after 12 months).


9. Your Rights


  • Access/Portability: Request a copy of your data in machine-readable format.
  • Correction: Update inaccuracies in your Account profile.
  • Deletion: Remove data not essential for legal/compliance purposes.
  • Object/Restrict: Limit processing for marketing or legitimate interests.


Email requests to activate@overhyped.ai. Response time: 30 days.


10. Cookies and Tracking


Essential Cookies:

Used for session management, security, and payment processing. Opt-out is not optional.


Analytics Cookies:

Used for feature usage trends and error rate monitoring (Google Analytics). Opt-out is available through browser settings or the cookie banner.


Marketing Cookies:

Used for retargeting ads and campaign performance (LinkedIn, Facebook Pixel). Opt-out is available via ad platform opt-out tools or the cookie banner.


11. Children’s Privacy


Services are not intended for users under 16. We do not knowingly collect data from minors.


12. Updates and Contact


Policy changes will be posted at https://www.overhyped.ai/privacy. For questions, contact: