Overleap（Overleap.io）プライバシー保護に関する声明
Last updated: 2026-09
1.1 Account Information: When you register an account with Overleap, we collect your email address for account verification and login. You may also choose to use our service anonymously through device identifiers.
1.2 Device Information: To provide services and prevent abuse, we collect device identifiers, operating system version, app version, and other basic device information.
1.3 Connection Logs: We record connection timestamps and server locations used for service optimization and troubleshooting. We do not record your browsing history, DNS queries, or any information that could identify your online activities.
1.4 Payment Information: Payments are processed through third-party payment processors. We do not directly store your credit card or bank account information. We only retain transaction records for order management and refund processing.
1.5 Traffic Volume Statistics: To safeguard service quality and fair use, we record the daily traffic volume of each device under your account. This record is a byte-count total only (aggregated per device, account, and server, per day) and contains none of your actual online activity — we do not know, and cannot reconstruct, which websites you visited, which apps you used, or what data you transmitted. These statistics are retained for 2 months only.
2.1 Service Provision: We use collected information to provide, maintain, and improve network proxy services, including server allocation, connection optimization, and technical support.
2.2 Account Management: Managing your subscription, processing payments, and sending service-related notifications (such as renewal reminders and service changes).
2.3 Security Protection: Detecting and preventing fraud, abuse, and other harmful activities to protect our users and service infrastructure.
2.4 Service Improvement: Analyzing aggregated usage data (not containing personally identifiable information) to improve service performance and user experience.
2.5 Legal Compliance and Data Protection: Overleap LLC is registered and operates under U.S. law and is subject to U.S. privacy protection laws. We commit not to share your personal data with any third-party government agencies or organizations other than U.S. government agencies. We will only cooperate with lawful requests from U.S. law enforcement when explicitly required by U.S. law.
3.1 Transmission Encryption: All data transmission uses TLS 1.3 encryption, and VPN tunnels use AES-256-GCM encryption.
3.2 Storage Security: User data is stored in data centers with industry-standard security measures, including physical access controls, network isolation, and encrypted storage.
3.3 Access Control: We strictly limit employee access to user data, with only authorized personnel accessing it when necessary.
3.4 Security Audits: We conduct regular security assessments and vulnerability scans, promptly fixing any discovered security issues.
3.5 No-Log Policy: We do not record your network activity content, including websites visited, files downloaded, or applications used.
4.1 Account Data: Retained during your account's active period and completely erased within 30 days after account deletion.
4.2 Connection Logs: Only the last 7 days of connection logs are retained for service optimization and troubleshooting, then automatically deleted.
4.3 Traffic Volume Statistics: Retained for the most recent 2 months only, then automatically deleted (see Section 1.5 — these statistics contain none of your actual online activity).
4.4 Payment Records: Transaction records are retained for 7 years as required by financial regulations.
4.5 Support Records: Communication records related to customer support are retained for 2 years after issue resolution.
4.6 Deletion Requests: You may request deletion of your account and related data at any time, and we will process your request within 30 days.
5.1 Essential Cookies: We use essential cookies to maintain your login session and remember your preferences.
5.2 Analytics Cookies: We may use anonymous analytics tools to understand website usage; this data does not contain personally identifiable information.
5.3 No Ad Tracking: We do not use any third-party ad trackers or marketing cookies.
5.4 Cookie Management: You can manage or disable cookies through your browser settings, though this may affect certain features.
6.1 Payment Processing: We use third-party payment processors to handle payments; they have their own privacy policies.
6.2 Infrastructure Providers: We use cloud services and data center providers to host our services.
6.3 Crash Diagnostics: We use Sentry, a third-party crash diagnostics service, to receive error reports from our client applications so that we can locate defects. A report contains the error stack trace, application version, operating system and device model, and the IP address it was sent from; it does not contain your browsing history, DNS queries or any network activity.
6.4 Data Sharing Restrictions: We do not sell, rent, or otherwise provide your personal information to third parties for marketing purposes.
7.1 Right of Access: You have the right to access personal information we collect about you.
7.2 Right of Correction: You may correct inaccurate information in your account.
7.3 Right of Deletion: You may request deletion of your account and related data.
7.4 Right of Data Portability: You may request to export your data in a common format.
7.5 Exercising Rights: To exercise these rights, please contact us at privacy@overleap.io.
8.1 Right to Modify: We may update this privacy policy from time to time.
8.2 Change Notification: Significant changes will be communicated via email or website announcement.
8.3 Continued Use: Continuing to use the service after a change notification indicates your acceptance of the updated privacy policy.
If you have any questions or complaints about this privacy policy, please contact us:
Email: privacy@overleap.io