Privacy Policy

Privacy Policy

Last Updated: December 9, 2025

1. Introduction

Welcome to Overline ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate investment analysis platform at overlineiq.com (the "Service").

By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you provide directly to us, including:

• Account Information: Email address, password, full name, and phone number when you create an account
• Profile Information: Any additional information you choose to add to your profile
• Property Investment Data: Information about properties you search for, analyze, save as favorites, and create investment memos for
• Communication Data: Messages, feedback, and other communications you send to us
• Newsletter Subscriptions: Your first name and email address when you subscribe to our newsletter

2.2 Information Collected Automatically

When you access our Service, we automatically collect certain information, including:

• Usage Information: Pages viewed, properties analyzed, features used, time spent on pages, and navigation patterns
• Device Information: Browser type, operating system, device type, IP address, and unique device identifiers
• Session Information: Login times, session duration, and authentication tokens
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity and store certain information (see Section 7 for details)

2.3 Information from Third Parties

We may receive information from third-party services you use to access our platform:

• Google OAuth: When you sign in with Google, we receive your email address and basic profile information that you authorize Google to share with us
• Property Data Providers: Information about real estate properties, market data, and comparable sales from third-party data providers

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Our Service: To create and manage your account, provide property investment analysis, calculate tax benefits and depreciation schedules, generate investment memos, and deliver personalized property recommendations
• Improve Our Service: To understand how users interact with our platform, identify areas for improvement, develop new features, and enhance user experience
• Communication: To send you service-related announcements, respond to your inquiries, provide customer support, and send newsletters and marketing communications (with your consent)
• Security and Fraud Prevention: To protect our Service, detect and prevent fraud, enforce our terms of service, and ensure the security of user accounts
• Analytics: To analyze usage patterns, measure the effectiveness of our features, and understand user preferences
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf, including:
  • PostHog (analytics and product insights)
  • HubSpot for customer relationship management and email communications
  • Google Cloud Platform for infrastructure and services
  • Database and hosting providers
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities
• Protection of Rights: To protect the rights, property, or safety of Overline, our users, or others
• With Your Consent: We may share information with your explicit consent for specific purposes

5. Data Retention

We retain your personal information for as long as necessary to provide our Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Secure password hashing using industry-standard algorithms
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure session management with token-based authentication

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your use of our Service. Cookies are small data files stored on your device.

Types of cookies we use:

• Essential Cookies: Required for authentication, security, and basic functionality of our Service
• Analytics Cookies: Help us understand how users interact with our Service through PostHog analytics
• Session Cookies: Store your session token to keep you logged in

Most web browsers are set to accept cookies by default. You can choose to set your browser to remove or reject cookies, but this may affect the availability and functionality of our Service.

8. Third-Party Services

Our Service integrates with the following third-party services:

• Google OAuth: For secure authentication (subject to Google's Privacy Policy)
• PostHog: For analytics and product insights (subject to PostHog's Privacy Policy)
• HubSpot: For customer relationship management and email communications (subject to HubSpot's Privacy Policy)
• Google Maps API: For location services and property mapping (subject to Google's Privacy Policy)

These third-party services have their own privacy policies. We encourage you to review their privacy policies to understand how they collect and use your information.

9. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access and review your account information at any time by logging into your account
• Correction: You can update or correct your personal information through your account settings
• Deletion: You can request deletion of your account and personal information by contacting us
• Opt-Out of Marketing: You can unsubscribe from marketing emails using the unsubscribe link in any marketing email
• Data Portability: You can request a copy of your personal data in a structured, machine-readable format
• Withdraw Consent: Where we process your information based on consent, you can withdraw that consent at any time

To exercise any of these rights, please contact us using the information in Section 13.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically. Your continued use of our Service after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@overlineiq.com
• Website: https://overlineiq.com/contact

14. Additional Information for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us using the information provided in Section 13.

15. Additional Information for European Union Residents

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your personal information includes: (1) your consent, (2) performance of a contract with you, (3) compliance with legal obligations, and (4) our legitimate interests in providing and improving our Service.