Privacy Policy

Last updated 23 October 2026

The short version: microphone speech recognition and spoken replies run on your computer. What you ask the assistant to do is sent to the AI provider you chose (OpenAI, Anthropic, xAI or Google) so it can carry out your request. We store your account and subscription details, and the logins for any services you connect. The app also sends anonymous daily usage counts, which you can switch off, and sends bug reports only when you choose to send one.

What stays on your computer

Your microphone audio. Speech recognition runs on your machine and keeps microphone audio there. Overview's spoken replies are also generated on your computer.

Assisted setup. During onboarding, setup questions and redacted setup-page contents pass through Overview's setup service to OpenAI, funded by Overview. Session context is held in service memory for up to one hour, not saved as server-side conversation history. Provider keys are verified and saved locally, not sent to the setup helper. To limit abuse, we retain a hashed installation credential and request counts, plus daily request totals and a server-keyed hash of your network address. These setup limits are separate from optional usage statistics. After setup, normal requests use your selected provider key or supported CLI.

Your files. Overview reads and writes files locally. File contents are sent only when the assistant needs them to answer what you asked, for example, reading a file you asked it to edit.

Your settings and API keys. Stored in a file on your computer. A key you add for your own provider never reaches our servers.

Your chat history. Overview keeps a record of your conversations, and the actions it took, in a folder on your computer so it can recall an earlier conversation when you ask about one. It is never uploaded to us. It is only read back when you ask Overview about a past conversation, and what it recalls then is sent to your AI provider like anything else you ask. The history is capped at a size you choose in Settings (or off entirely): older days are compressed, then shortened, then deleted to stay under it. You can open or delete the folder at any time.

What is sent to AI providers

To answer you, the provider you selected receives the text of your request plus whatever the assistant needs to answer it: file contents, a screenshot when you ask it to look at your screen, an image you ask it to edit, or text you ask it to turn into an audio file.

Current Free and Pro plans do not include normal AI provider usage. With your own key, requests go directly from your computer to that provider. With Codex CLI or Claude Code, requests pass through the selected CLI on your computer using its provider account; we never see or handle that sign-in. Legacy hosted-plan requests, where still available to an existing account, pass through our server and record usage cost. Image and audio generation use your own key. If the provider you selected can't do one of those, Overview uses another provider key you've saved and tells you which one.

Providers process this data under their own policies. Check your provider's terms for whether it trains on data sent through its API.

Browser connections

With your approval, Overview can connect to Chrome or Edge through the browser's remote debugging connection. That permission gives technical access to tabs in that browser instance. Overview reads page content and controls to carry out the browsing task you requested; relevant content may be sent to your selected AI provider or, during setup, Overview's setup service. Only enable a connection for a browser you intend Overview to use. You can revoke the connection or disable remote debugging in your browser.

Optional browser extension

The optional browser extension connects your browser to the Overview desktop app on the same computer. It operates in a dedicated Overview tab, not across your unrelated tabs. When you ask Overview to browse, the extension can pass that tab's address, title, page content, control labels and requested screenshots to the desktop app. Relevant content may then be sent to the AI provider you selected to carry out your request.

The extension stores its working tab identifier for the browser session and reconnects to the local app. It has no separate account, advertising or analytics service, and does not export browser cookies or save passwords. Passwords, verification codes and payment credentials must be entered by you. Information visible on a page may be sensitive; only ask Overview to work with information you intend to share with your AI provider.

You can stop the browser connection by disabling or removing the extension. Remove the extension in each browser profile where you installed it. The optional visual cursor is controlled in Overview and does not move your desktop mouse.

What we collect

What we do not collect

We do not store your conversations, your prompts, the model's replies, your file contents, or your voice, except for anything you choose to attach to a bug report. There is no advertising tracking, and we do not sell your data.

This website

The site is served through Cloudflare, which provides basic, cookie-free page view statistics. Our hosting keeps standard server logs, including IP address, browser and the page requested, for a short time. When the app checks for updates, it tells our server which version it is.

Other services the app contacts

Some features only work by asking another service. They are contacted only when you use that feature:

Payments

Stripe handles all payments and card data. We never receive or store your card details. Stripe's privacy policy governs that processing.

Email

Account emails (confirmation and password resets) are sent through Resend. We do not send marketing email.

Where your data lives

Account data, bug reports and usage statistics are stored with Supabase, and our server runs on Railway, both in the United States. The website is delivered through Cloudflare's global network.

How long we keep it

Account data is kept for as long as your account exists. Daily plan usage records are kept for a rolling period to enforce limits and then deleted. Anonymous usage statistics are kept day by day for 90 days, then combined into monthly averages and the daily records deleted. Bug reports are kept while we investigate and fix them; you can ask us to delete one at any time. If you delete your account we remove your data within 30 days, except where we are legally required to retain billing records.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it. Email [email protected] and we will action it within 30 days.

Children

Overview is not intended for anyone under 13, and we do not knowingly collect their data.

Changes

If we change this policy materially, we will email you before it takes effect.

Contact

[email protected]