Privacy Policy

Overlap is designed around privacy.

It is not a public social network. There is no public feed of users' ideas or problems, no follower system, and no public directory where people or companies can browse private Drops.

When you submit an idea or problem — which we call a “Drop” — Overlap privately analyzes it to identify potentially meaningful connections with other users.

If Overlap identifies a possible match, limited information may be shown to each participant so they can decide whether they are interested. Your identity and full matched content are not intended to be revealed to the other participant until the required mutual consent has taken place.

When you create an account, we may collect your email address, name, profile information, authentication information and other information you voluntarily provide.

If you sign in using Google, we may receive basic account information authorized by Google, such as your email address, name, Google account identifier and profile image. We do not receive your Google password.

We collect the content you voluntarily submit to Overlap, including Drops, descriptions, profile information, messages, meeting proposals and other content exchanged through Match Rooms.

We may also process technical information needed to operate and secure the service, such as IP address, browser information, authentication events, timestamps, error logs and security information.

Overlap may use automated systems, including artificial intelligence and semantic analysis, to understand the meaning of a Drop and compare it with other eligible Drops.

This processing may generate internal information such as themes, semantic representations, embeddings, classifications, candidate relationships and match scores.

These internal matching signals are used to operate the matching service and are not intended to become public information.

A potential match does not automatically reveal your identity or create a connection. Users decide whether they want to proceed.

We use personal information to operate user accounts and authentication, store and manage Drops, identify potentially relevant matches, create match invitations, operate mutual-consent matching, provide Match Rooms and messaging, send service notifications, protect the platform from abuse, troubleshoot technical issues and improve the reliability and quality of Overlap.

We may also process information where necessary to comply with applicable legal obligations.

Overlap does not provide companies with general access to browse individuals' private Drops.

We do not sell private Drops or private conversations to advertisers.

If you choose to sign in with Google, Google provides Overlap only with the permissions you authorize.

Overlap currently requests basic authentication information necessary to identify your account, including your Google identity, email address and basic profile information.

Overlap does not request access to your Gmail messages, Google Drive files, Google Calendar, contacts or other unrelated Google services.

Google account information received by Overlap is used to provide authentication and your Overlap account.

Overlap may use third-party infrastructure or AI providers to process information needed for semantic analysis and matching.

Where third-party providers process personal information on our behalf, we seek to use providers and configurations appropriate for private application data and subject to applicable contractual and data-protection safeguards.

Before broader public launch, Overlap will maintain a current list of relevant service providers where required.

Before mutual consent, Overlap may show anonymized or limited information explaining why two Drops appear to overlap.

Once both participants agree to connect, additional information may be revealed within the Match Room, including identities, profile details and the relevant matched Drops.

Once another person has legitimately received information through a mutual connection, Overlap cannot control information they remember or actions they take outside the platform.

You should therefore avoid submitting information you are not legally entitled to share.

Where the GDPR applies, we primarily process data because it is necessary to provide the service you request.

We may also rely on legitimate interests for purposes such as security, fraud prevention, service reliability, debugging and product improvement, where those interests do not override your rights.

Where legally required, we rely on consent, including for certain optional communications or non-essential tracking technologies.

We may also process information where necessary to comply with legal obligations.

Overlap relies on service providers for functions such as cloud infrastructure, database hosting, authentication, email delivery, security and AI processing.

These providers may process information in countries outside France or the European Economic Area.

Where required, appropriate safeguards are used for international transfers in accordance with applicable data-protection law.

We keep personal information only for as long as reasonably necessary to operate Overlap, protect the service, comply with legal obligations and resolve legitimate disputes.

Users may delete or archive content where the product provides those controls and may request deletion of their account.

We will define and publish more specific deletion and backup-retention periods before broader public launch.

Depending on your location, you may have rights to access your personal information, correct inaccurate information, request deletion, restrict certain processing, object to certain processing, receive certain information in portable form and withdraw consent where processing is based on consent.

You may contact us at privacy@overlaptogether.com.

Where the GDPR applies, you may also have the right to lodge a complaint with the competent data-protection authority.

Users may request deletion of their account and associated personal data, subject to information that Oxolot Consulting may need to retain for legitimate legal, security or dispute-resolution purposes.

Overlap may use cookies or browser storage necessary for authentication, security, account preferences, beta access and preserving information during account creation.

We currently intend to avoid advertising trackers.

If we later introduce analytics, advertising or other non-essential technologies that require consent, we will provide the appropriate controls before using them.

We use technical and organizational measures designed to protect personal information and restrict access to private user content.

These include authentication controls and database access rules designed to prevent users from freely accessing other people's private Drops.

No online service can guarantee absolute security.

Overlap is currently intended for people aged 18 or older.

We do not knowingly provide the service to children.

We may update this Privacy Policy as Overlap develops.

If we make a material change to how we process private Drops or other personal information, we will provide appropriate notice where required.