Overview Software Inc. (“Overview,” “we,” “us”) provides a geospatial data platform through our websites, web application, and mobile applications that helps businesses identify properties within a geographic area, obtain contact records associated with those properties, and send direct mail (the “Services”).
This policy describes how we handle personal information about two different groups of people, and it is organized accordingly:
- Customers — people who create accounts and use the Services on behalf of a business (Sections 2, 4–12).
- Individuals in our data products — people who do not use Overview, but whose contact information appears in the records we license to customers (Section 3). If you believe your information may be in our data products and you want it removed, see Section 3.4 — you can opt out by emailing legal@overview.app. Overview does not currently offer Data Product records concerning California residents or California locations.
1. Scope
This policy covers Overview’s websites, web application, iOS and Android mobile applications, data products, and related Services. It does not cover what our customers do with data they obtain from us; customers are independent businesses responsible for their own privacy and marketing-law compliance.
2. Information we collect from customers
Account information. When you sign up we collect your name, email address, organization name, industry, and subscription tier. Authentication is operated by our identity provider; your password and login sessions are managed by our identity provider, not stored by Overview.
Billing information. Payments are processed by Stripe. Your card details are entered directly with Stripe and never touch Overview’s servers. We retain your Stripe customer reference, your organization’s credit balance, and a transaction ledger. We can see and display the card brand, last four digits, and expiration date that Stripe provides.
Content you upload. Postcard artwork (images or PDFs) and your organization’s return address, which we store to fulfill your mail campaigns.
Usage information. We use providers for product analytics (identified by your user ID, email, and name — e.g., which map tools and features you use, purchase and export events) and for error monitoring (crash reports may include your user and organization IDs). Our servers log requests, including request metadata and IP addresses.
Map interactions. Base maps and address search are provided by Mapbox; your map viewport requests and typed search queries are sent to Mapbox to render maps and return results.
Mobile application and device information. When you use our mobile applications, we and our service providers receive technical information such as your device type, operating-system and app version, IP address, app-instance or device identifiers, language, network information, product-usage events, and crash or diagnostic data. We associate certain identifiers and usage events with your Overview user or organization so that we can authenticate the app, operate purchases, understand use of the product, prevent abuse, and troubleshoot problems.
Notifications. If you enable notifications, we and our push provider, receive a push-notification token and related device and app information so we can deliver storm alerts, account updates, and canvassing-session notices. You can disable notification categories in the app or all notifications in your device settings.
Device location and canvassing sessions. With your permission, the mobile applications collect your device’s precise or approximate location to center maps, show nearby storms, and display your position. If you choose to start a canvassing session, Overview records timestamped location coordinates and accuracy information to create your route, associate doors you log with addresses, measure session activity, support offline operation and later synchronization, and provide session history and team features. If you grant background or “always” location permission, this recording may continue while the app is not visible or your device is locked, but only while a canvassing session is running. The app may use a geofence around an active work area to support the session. Starting a session requires an in-app disclosure and your affirmative action; ending the session stops location recording. If you allow only foreground location, route recording stops when the app is not open.
The individual timestamped location samples collected during a canvassing session are retained for 48 hours. We then delete those samples after creating a GeoJSON LineString representing the route traveled. The route LineString remains location information and is retained as part of the canvassing-session history. Your organization can see your sessions, logged doors, and team-leaderboard position. If a team route-sharing feature is enabled, authorized members of your organization may also see the route LineString and related session details. Property coordinates displayed elsewhere in the Services describe selected properties and are not necessarily the location of your device.
Files and artwork. If you choose to upload postcard artwork or another file from your device, the app accesses and uploads only the file or image you select through the system picker. The app does not request general access to your photo library for this purpose.
Marketing site visitors. When you visit overview.app we collect standard log and analytics data (IP address, browser information, referrer, pages viewed) via our hosting provider and analytics provider. If you book a demo, our provider collects your name, email, and any details you share under its own privacy policy.
Within your organization, data is shared. All members of your organization can see the organization’s map selections, purchased records, exports, mail campaigns, return address, and billing ledger. Depending on the team features enabled for your organization and your role, authorized organization members may also see canvassing sessions, logged doors, activity metrics, leaderboard position, and derived route LineStrings. Your organization controls its members and their roles and is responsible for providing any workplace notices or obtaining any consents required for its use of these features.
3. Individuals in our data products
3.1 What we collect and why
When a customer selects a geographic area, we identify residential and commercial addresses in that area and obtain associated contact records. These records can include:
- Name
- Phone number, and whether that number appears on a do-not-call list
- Residential or business mailing address, including precise location coordinates
- Address attributes (e.g., county, postal routing data, residential vs. commercial classification)
- Property and building information derived from public datasets
We collect this information so that our customers — typically local service businesses — can market their services to households and businesses in a specific area, including by phone outreach and printed mail.
3.2 Where it comes from
We do not collect this information from the individuals themselves. It comes from:
- Licensed commercial data providers, which aggregate identity and contact records from public records and other sources;
- Address verification services, which validate and standardize US postal addresses;
- Public and government datasets, such as NOAA severe-weather data and open building-footprint datasets.
3.3 How it is disclosed
We license these records to our business customers, who may export them and use them for their own marketing. We also use the records to print and mail postcards on customers’ behalf through our print-and-mail provider. Records obtained for one customer may be retained and used to fulfill requests from other customers.
Overview does not currently collect, offer, license, or otherwise disclose Data Product records concerning California residents or California locations. Our geographic coverage excludes California. If we expand the Data Products to include California, we will update this policy and implement applicable California privacy rights before doing so.
We do not use Data Product information for targeted advertising profiles, and we do not knowingly license information about individuals under 18; our data requests are limited to adults.
3.4 Your choices (for individuals in our data products)
If you are a US resident and want your information removed from our data products, email legal@overview.app with your name and address. We will suppress your records from future exports and mailings and delete the associated contact records we hold, within 45 days of verifying your request. You may also have rights directly with our upstream data providers.
California residents may contact us regarding any customer-account, website, application, or other personal information Overview holds about them. Overview does not currently sell or share personal information concerning California residents through its Data Products. We do not discriminate against anyone for exercising a privacy right.
4. How we use information
We use the information described above to: provide and operate the Services; fulfill purchases, exports, and mail campaigns; process payments and maintain billing ledgers; provide support; monitor errors, security, and performance; understand product usage; and comply with law. We do not use personal information to train machine-learning models.
5. How we share information
We share personal information with service providers that process it on our behalf:
| Recipient category | Purpose |
|---|---|
| Hosting and infrastructure providers | Hosting, databases, file storage, security, and content delivery |
| Authentication providers | Account login, identity verification, and session management |
| Payment and subscription providers | Payment processing, subscriptions, credits, and transaction records |
| Apple and Google | Mobile app distribution, in-app payment processing, and related platform services |
| Analytics and diagnostics providers | Product analytics, performance monitoring, and error reporting |
| Mapping and address providers | Maps, address search, geocoding, and address validation |
| Communications providers | Push notifications and demo scheduling |
| Data suppliers | Obtaining and enriching property and contact records |
| Print-and-mail providers | Producing and delivering mail campaigns using recipient and return addresses |
Our web application also loads fonts and icons, which receive your IP address and browser information when the page loads. Mobile platform providers, including Apple and Google, may process app-download, device, purchase, and diagnostic information under their own privacy policies.
Beyond service providers and the customer disclosures described in Section 3, we may disclose information: to comply with law or legal process; to protect the rights, safety, or property of Overview, our customers, or others; or in connection with a merger, acquisition, or sale of assets (in which case this policy will continue to apply to previously collected information until updated).
We do not share customer account information with third parties for their own marketing.
6. Cookies, local storage, and mobile permissions
We use cookies and browser storage for authentication (session cookies), your session token, your map and layer preferences, and analytics. We do not run third-party advertising cookies. Because the Services require authentication to function, essential cookies cannot be disabled; you can limit analytics via your browser’s tracking protections.
Mobile operating systems provide controls for notifications and device location. You can change these permissions in your device settings. Disabling location prevents location-dependent features from working; allowing foreground but not background location limits canvassing route recording to times when the app is open. Ending a canvassing session stops session location recording without requiring you to change the operating-system permission. We do not use mobile permissions to access information unrelated to the feature for which the permission was requested.
7. Data retention and storage
Overview’s production databases and cloud file storage are hosted in the United States. Some information is also stored locally on your device to support preferences, downloads, and offline canvassing sessions, and our service providers process information through their own systems. Overview’s databases are encrypted at rest and reachable only over private networking; traffic is encrypted in transit.
- Customer account and billing-ledger records are retained while your account is active and as needed for tax, accounting, and legal purposes afterward.
- Exported CSV files and uploaded artwork are automatically deleted from cloud storage after 90 days.
- Individual timestamped location samples recorded during a canvassing session are retained for 48 hours and then deleted after they are converted into a GeoJSON LineString representing the route traveled. The derived route LineString, session summaries, logged-door records, consent records, and leaderboard activity are retained with the organization’s session records while needed to provide session history and team features, subject to account deletion and legal-retention requirements.
- Contact records in our data products are retained while they remain commercially useful, unless the individual opts out under Section 3.4.
- Database backups are retained for up to 14 days.
8. Your rights
All users and data subjects may email legal@overview.app to request access to, correction of, or deletion of their personal information. We will verify your identity and respond within 45 days.
California residents. Overview does not currently sell or share personal information concerning California residents through its Data Products. California residents may nevertheless contact legal@overview.app regarding customer-account, website, application, or other personal information Overview holds about them. Where California law applies, California residents may have rights to know, delete, or correct personal information; opt out of its sale or sharing; limit certain uses or disclosures of sensitive personal information; and not be discriminated against for exercising those rights. Precise device geolocation is used only to provide the location features described in Section 2. You may designate an authorized agent to submit a request on your behalf. We honor applicable browser-based opt-out preference signals for online data where required by law.
Residents of other states with comprehensive privacy laws (e.g., Colorado, Connecticut, Texas, Virginia) may have similar rights; we honor access, deletion, correction, and opt-out-of-sale requests from all US residents. If we deny your request, you may appeal by replying to our decision, and we will respond within 45 days.
9. Security
We use commercially reasonable safeguards: private-network databases, encryption in transit and at rest, secrets management, scoped service accounts, and signature verification on inbound webhooks. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as required by law.
10. Children
The Services are for business use and not directed at anyone under 18. We do not knowingly collect information from children, and our data-product requests are restricted to records of adults.
11. Changes to this policy
We may update this policy. Material changes will be announced through the Services or by email to account holders, with the new effective date shown above. Continued use after the effective date constitutes acceptance.
12. Contact
Overview Software Inc. Email: legal@overview.app