Who we are
Overmind Technology Ltd. ("Overmind", "we", "us") provides an AI Security & Observability platform. We are registered in the UK. Contact: [email protected] Address: Walworth Town Hall 151 Walworth Road, Office 302, London, England, SE17 1RS
Scope of this notice
- Account Data: This Notice applies to the personal data we collect about our business clients (administrators, buyers) and website visitors. Overmind is the Data Controller for this data.
- Customer Content: We process prompt inputs, model outputs and other content submitted through the platform on behalf of our Clients. The Client is the Data Controller and Overmind is the Data Processor. Our Terms of Service and applicable Data Processing Addendum govern this processing. The integration disclosures below explain how connected workflows use Customer Content.
Data we collect (account data)
- Identity & Contact Data: Name, email, job title, and company name of account administrators.
- Billing Data: Payment information (processed via our secure payment provider; we do not store full card numbers).
- Technical Data: IP address, browser type, and usage data regarding how you interact with our dashboard (for security and product improvement).
How we use account data
We process Account Data to:
- Register new customers (Performance of Contract).
- Process payments and manage subscriptions (Performance of Contract).
- Secure our platform and prevent fraud (Legitimate Interest).
- Notify you about changes to our service (Legal Obligation).
Where we store data:
- Our primary infrastructure is hosted on Amazon Web Services (AWS) in the Ireland (eu-west-1) region.
- For UK Clients: Transfers to the EEA (Ireland) are covered by the UK "Adequacy Regulations."
- For EU Clients: Data remains resident within the EEA.
Data security
We utilize industry-standard encryption (AES-256 for data at rest, TLS 1.2+ for data in transit). Please review our Trust Center for detailed security architecture.
Your rights
Under the UK GDPR, you have rights to access, correct, or delete your Account Data. To exercise these rights, please contact [email protected].
Connected tools and integrations
When you connect Overmind to an agent client such as Codex or ChatGPT, the connection can access projects your Overmind account is authorized to use. Depending on your requests, the integration processes project and capability identifiers, traces and their inputs and outputs, dataset content, evaluation results, and training or inference requests and results. We use this information to perform the requested workflows, maintain access controls and operate the service.
Recipients of integration data
Results requested through the integration are returned to the connected agent client. Cloud hosting and storage, authentication, operational monitoring and analytics providers support the service. Model, evaluation, training and inference providers may process workflow content when those workflows are used. These recipients depend on the connected services and selected workflow; their handling of data is also subject to their applicable terms and privacy notices.
Customer-content retention and deletion
Section 5.5 of our Terms of Service states that Customer Data is retained during the Subscription Period and for 30 days thereafter unless an Order Form specifies otherwise. Upon termination or expiration, customers may request deletion; Customer Data will be deleted or anonymized within 90 days of termination, except where retention is required by law. Customers should export their data before termination. See https://www.overmindlab.ai/legals/terms.
Our current production application-log retention setting is 365 days. Automated production database backups have a rolling 7-day retention setting. These operational settings do not define the retention of manual snapshots, exported copies or third-party analytics.
Connection controls
OAuth access tokens expire after one hour. The connection remains authorized through rotating refresh tokens until revoked. Revoking the connection prevents continued use of that authorization; it does not itself delete content already stored in Overmind or copies already returned to the connected client. Contact [email protected] for data-access, correction or deletion requests.