Privacy Policy

1. Who We Are

OVRTE, Inc. ("OVRTE," "we," "us," or "our") is the operator of the OVRTE platform and website. For purposes of applicable privacy law, OVRTE, Inc. is the data controller for personal information collected through our website and the data processor for lead information collected on behalf of our business customers through the AI chat widget.

Contact: privacy@ovrte.com

2. Information We Collect

2.1 Information You Provide Directly

• ·Account information: your name, email address, phone number, business name, and business address when you register;
• ·Payment information: billing address and payment card details — processed directly by our payment processor; we do not store full card numbers or CVV codes;
• ·Business configuration: your service categories, operating hours, geographic service area, and pricing provided to configure the AI;
• ·Support communications: messages and attachments you send to our support team;
• ·Survey and feedback responses.

2.2 Information Collected Automatically

When you use our website or Service, we automatically collect:

• ·Usage data: pages visited, features used, button clicks, session duration, and navigation paths;
• ·Device and browser information: browser type and version, operating system, screen resolution, and device type;
• ·Network information: IP address, approximate geographic location (derived from IP), and internet service provider;
• ·Log data: server access logs, error reports, and performance data;
• ·Cookies and similar tracking technologies (see Section 7).

2.3 Lead Data (Collected on Behalf of Business Customers)

When a website visitor interacts with the OVRTE chat widget embedded on a business customer's website, the visitor may provide personal information such as their name, phone number, email address, and service request details ("Lead Data"). This Lead Data is collected on behalf of and is owned by the business customer (our subscriber). We process Lead Data only as directed by our business customers and in accordance with our Terms of Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

4. How We Share Information

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

We share information only in the following limited circumstances:

5. Data Retention

We retain your personal information for as long as your account is active and as reasonably necessary to fulfill the purposes described in this Privacy Policy. Specific retention periods:

• ·Account data: retained for the duration of your subscription plus 60 days after account closure to allow for re-activation;
• ·Lead Data: retained for the duration of your subscription and for 30 days following cancellation, after which it is securely and permanently deleted;
• ·Payment records: retained for 7 years as required by applicable tax and accounting laws;
• ·Support records: retained for 3 years;
• ·Security and server logs: retained for 90 days.

You may request deletion of your personal information at any time, subject to our legal obligations to retain certain records.

6. Data Security — New York SHIELD Act Compliance

In compliance with the New York SHIELD Act (N.Y. Gen. Bus. Law § 899-bb), we have implemented and maintain a written information security program containing reasonable administrative, technical, and physical safeguards appropriate to the size and complexity of our business, designed to protect the security, confidentiality, and integrity of private information of New York residents. Our safeguards include:

• ·Encryption of personal information in transit (TLS 1.2+) and at rest;
• ·Access controls and least-privilege principles to limit who can access personal data;
• ·Multi-factor authentication requirements for administrative access;
• ·Regular security assessments and vulnerability management;
• ·Employee training on data privacy and security practices;
• ·Incident response and data breach notification procedures.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

Data Breach Notification: In the event of a security breach that affects private information of New York residents, we will provide notification to affected individuals and, where required, to the New York Attorney General, Department of Financial Services, Division of State Police, and the Division of Consumer Protection, in the most expedient time possible and without unreasonable delay, in accordance with N.Y. Gen. Bus. Law § 899-aa.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (web beacons, pixels) for the following purposes:

You may control or disable cookies through your browser settings. Instructions vary by browser — consult your browser's help documentation. Note that disabling cookies may impair your ability to use certain features of the Service.

8. Your Privacy Rights and Choices

Regardless of your location, you have the following rights regarding your personal information:

To exercise any of these rights, contact us at privacy@ovrte.com. We will respond to verified requests within 45 days. We may request additional information to verify your identity before fulfilling requests.

9. Children's Privacy

The Service is designed for and directed to businesses and adults. We do not knowingly collect, solicit, or process personal information from children under the age of 13 (or the applicable age of digital consent in your jurisdiction). If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@ovrte.com and we will delete such information promptly.

10. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

11. International Data Transfers

Our servers are located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to the transfer of your information to the United States.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will: (a) post the updated Privacy Policy on this page with a new "Last Updated" date; and (b) provide notice via email to registered account holders at least 14 days before the changes take effect.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.