Privacy Policy

Last updated: 2026-10

1. Information We Collect

1.1 Account Information: When you register an account with Overleap, we collect your email address for account verification and login. You may also choose to use our service anonymously through device identifiers.

1.2 Device Information: To provide services and prevent abuse, we collect device identifiers, operating system version, app version, and other basic device information.

1.3 Payment Information: Payments are processed through third-party payment processors. We do not directly store your credit card or bank account information. We only retain transaction records for order management and refund processing, and the billing country your payment provider gives us.

1.4 Traffic Volume Statistics: To safeguard service quality and fair use, we record the daily traffic volume of each device under your account. This record is a byte-count total only (aggregated per device, account, connection session and server, per day) and contains none of your actual online activity — we do not know, and cannot reconstruct, which websites you visited, which apps you used, or what data you transmitted. These statistics are retained for 2 months only.

1.5 Device Activity: For each signed-in device we keep the time it last authenticated, so we can enforce your plan's device limit and sign out devices you no longer use.

1.6 Country: When you sign in or your app authenticates, we derive a country from the request's IP address to show relevant servers and prevent abuse. We store the country code only, not the IP address.

1.7 Information You Choose to Send: If you rate a connection or send a support request with diagnostics, we receive it with the report: for a connection rating, your public IP address, internet provider, city and the server you used; for diagnostics, the app's logs. We use these only to resolve the problem you reported.

1.8 What We Never Record: The websites you visit, the apps you use, your DNS queries, or the content of your traffic.

2. How We Use Information

2.1 Service Provision: We use collected information to provide, maintain, and improve network proxy services, including server allocation, connection optimization, and technical support.

2.2 Account Management: Managing your subscription, processing payments, and sending service-related notifications (such as renewal reminders and service changes).

2.3 Security Protection: Detecting and preventing fraud, abuse, and other harmful activities to protect our users and service infrastructure.

2.4 Service Improvement: Analyzing aggregated usage data (not containing personally identifiable information) to improve service performance and user experience.

2.5 Legal Compliance and Data Protection: Wordgate LLC, which operates Overleap, is registered and operates under U.S. law and is subject to U.S. privacy protection laws. We commit not to share your personal data with any third-party government agencies or organizations other than U.S. government agencies. We will only cooperate with lawful requests from U.S. law enforcement when explicitly required by U.S. law.

3. Data Security Measures

3.1 Transmission Encryption: All data transmission uses TLS 1.3 encryption, and VPN tunnels use AES-256-GCM encryption.

3.2 Storage Security: User data is stored in data centers with industry-standard security measures, including physical access controls, network isolation, and encrypted storage.

3.3 Access Control: We strictly limit employee access to user data, with only authorized personnel accessing it when necessary.

3.4 Security Audits: We conduct regular security assessments and vulnerability scans, promptly fixing any discovered security issues.

3.5 No-Log Policy: We do not record your network activity content, including websites visited, files downloaded, or applications used.

4. Data Retention

4.1 Account Data: Retained during your account's active period and completely erased within 30 days after account deletion.

4.2 Traffic Volume Statistics: Retained for the most recent 2 months only, then automatically deleted (see Section 1.4 — these statistics contain none of your actual online activity).

4.3 Payment Records: Transaction records are retained for 7 years as required by financial regulations. This includes records of the subscription terms you agreed to at checkout (time, country and wording), kept as proof of your consent.

4.4 Website Visit Statistics: Retained for 120 days, then automatically deleted (see Section 5.3).

4.5 Support Records: Communication records related to customer support are retained for 2 years after issue resolution.

4.6 Deletion Requests: You may request deletion of your account and related data at any time, and we will process your request within 30 days.

5. Cookies and Tracking Technologies

5.1 Essential Cookies: We use essential cookies to maintain your login session and remember your preferences.

5.2 No Analytics Cookies: Our website does not use analytics cookies or session recording, and stores nothing on your device for statistics.

5.3 Website Visit Statistics: To understand which pages lead people to sign up and subscribe, our website sends us a small first-party record when you view a page, open the pricing or download page, click a download link, sign in or start a checkout. Each record contains the page path, any campaign tags in the link (utm_*), the website that referred you, your country (looked up from your IP address when the record arrives — the IP address itself is not stored with the record) and your device type. To tell one visit's pages apart from another's, the page creates a random identifier that exists only in your browser's memory while the page is open; it is never written to a cookie or to storage on your device, and a new one is created every time you reload the page or open a new tab. If you are signed in to your account on our website, the visit is linked to your account so we can count which pages lead to purchases. We do not use this information for advertising or share it with anyone, and we do not combine it with information from other websites. If your browser sends the Global Privacy Control signal, the record is counted without the identifier or account link. We rely on our legitimate interest in improving our website; you can object at any time by contacting us.

5.4 No Ad Tracking: We do not use any third-party ad trackers or marketing cookies.

5.5 Cookie Management: You can manage or disable cookies through your browser settings, though this may affect certain features.

6. Third-Party Services

6.1 Payment Processing: We use third-party payment processors to handle payments; they have their own privacy policies.

6.2 Infrastructure Providers: We use cloud services and data center providers to host our services.

6.3 Crash Diagnostics: We use Sentry, a third-party crash diagnostics service, to receive error reports from our client applications so that we can locate defects. A report contains the error stack trace, application version, operating system and device model, and the IP address it was sent from; it does not contain your browsing history, DNS queries or any network activity.

6.4 Data Sharing Restrictions: We do not sell, rent, or otherwise provide your personal information to third parties for marketing purposes.

7. Your Rights

7.1 Right of Access: You have the right to access personal information we collect about you.

7.2 Right of Correction: You may correct inaccurate information in your account.

7.3 Right of Deletion: You may request deletion of your account and related data.

7.4 Right of Data Portability: You may request to export your data in a common format.

7.5 Exercising Rights: To exercise these rights, please contact us at privacy@overleap.io.

8. Policy Changes

8.1 Right to Modify: We may update this privacy policy from time to time.

8.2 Change Notification: Significant changes will be communicated via email or website announcement.

8.3 Continued Use: Continuing to use the service after a change notification indicates your acceptance of the updated privacy policy.

9. Contact Information

If you have any questions or complaints about this privacy policy, please contact us:

Email: privacy@overleap.io