Privacy Policy

What we collect

Your name and email address; the projects and tasks you create; your settings (the day your week starts, the appearance, when completed tasks are cleared, and whether you get the daily digest email and at what time); and your time zone, so dates show correctly and the digest arrives in your morning. We use them only to run Overview for you.

When you sign in, we note the browser and IP address the session came from, and our server records the IP address of each request in its logs and uses it to limit repeated sign-in attempts. Overview's cookies only keep you signed in and protect its forms: there are no analytics or advertising cookies.

Who can read your tasks

Your name, your projects' names and your tasks' titles are encrypted in our database, so they can't be read there, or in its backups and copies. The keys are held by the Overview server, which uses them to show your tasks to you, so the service itself can technically read your tasks, and so can the people who run it. Everything else, such as dates, settings and your email address, is stored unencrypted.

The daily digest email carries some of them out of Overview in plain text: each morning it sends your first name, the day's tasks and the ones you completed the day before, with their projects' names, to your own inbox, through Resend. Once it arrives, your email provider holds it as it holds any other email.

The people who run Overview also use an admin screen, which only accounts they have marked as admins can open. It shows each account's name, email address, plan and settings, how many projects and tasks it has, dates, and the IP address and browser each device signed in with, and never the titles of your tasks or the names of your projects. The one exception is a copy of your data, which you can ask us for (see Contact us): the file the admin screen gives them for it holds your task titles and project names.

Payments

Payments are made through Stripe and Onelink, Stripe's consumer brand, which handle your card and billing details under their own privacy policies. Your card number goes straight to them: we never see it, and we store no card details. We keep only a reference to your Stripe customer record, your plan, its status and when your trial ends.

Emails

Overview sends you sign-in codes, and a daily digest each morning with the day's tasks and the ones you completed the day before. The digest is on until you turn it off, in Settings or with the Unsubscribe link in any digest, which stops the digest and nothing else; sign-in codes can't be turned off, since they are how you sign in. Stripe or Onelink sends the emails about your plan: when a trial starts and before it ends, before every renewal, your receipts, and anything about a failed payment or an expiring card. We may also write to you ourselves about your account, for example before a change to our terms.

Who we share with

Stripe and Onelink, for payments; Resend, which sends the sign-in codes and the daily digest, and keeps the emails it sends for about 30 days; Railway, which hosts Overview and its database; and Sentry, which reports errors to us, when we have it switched on (it is set up to receive none of your tasks, names or form contents). Some of them are based outside the UK, so your data may be processed there. We never sell your data.

Supporters

If you become a Supporter, we'll ask you by email before we add you to the supporters newsletter or show your name and a social link on our supporter page, and we'll do either only if you say yes. You can ask us to take you off either at any time. The #supporters channel is on Discord, whose own privacy policy applies there.

Deleting your data

Email us at support@overview.works and we'll delete your account and everything in it: your name, email address, projects, tasks, settings and sign-in records. If you have a subscription, we cancel it first. Deleting a task in Overview hides it; it is erased with your account.

We may also delete an account without being asked, once at least 30 days have passed since its plan ended (or its free trial ended, with no plan after it) or, for an account that never chose a plan or started a trial, since it was created. Until then we keep the account and what is in it, so you can choose a plan again. No account is deleted automatically: the people who run Overview go through these accounts by hand, so a deletion can come later than that, and we don't promise to email you first. If you want a copy of your data first, or want it deleted sooner, email us (see Contact us). Such a deletion removes the same things as one you ask for, and the same few things stay, described next.

A few things stay. Stripe and Onelink keep their records of your payments, as records of the sale, including the customer record they hold for you, with your email address and any name and billing details you gave them. Overview keeps a short log of what the people who run Overview do to an account (deleting it, signing it out everywhere, checking its plan with Stripe, or exporting its data): the date, what was done, the reason for a deletion, and numbers that identify the account and the person who did it, never your name, email address or tasks. It stays after your account is deleted, so that we can show that a deletion happened.

Copies held by other services clear out on their own schedules, so they outlast a deletion for a while. Resend keeps the emails it sent you, daily digests included, for the time given under Who we share with, and Railway's server logs and database backups age out on Railway's schedule.

Contact us

For a question about your data, or to ask for a copy of it or a correction, email support@overview.works. A copy is a file, which the person who runs Overview downloads from the admin screen and sends to you. It holds your account details, settings and plan, your projects and tasks (the ones you deleted, which we still hold, too), and your sign-in records: the browser and IP address of each device you have signed in with, and a note of each sign-in code we sent you, without the code itself. Your task titles and project names are readable in it, not encrypted. If you are unhappy with how we have handled your data, you can also complain to the Information Commissioner's Office, at ico.org.uk.