Last Updated: May 5, 2026

1. Introduction

Overvue.ai Ltd ("we," "our," or "us") provides an AI-powered conversational training and assessment platform comprising three products: a sales training product, a recruiting screening product, and a consumer interview practice product (available via web and via the Overvue iOS application). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service. We are committed to protecting your privacy and handling your data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

**Company Details:**Overvue.ai LtdCompany Number: 16108402Registered Address: 68 Richmond House, 23-31 Richmond Hill, Bournemouth, BH2 6EZ, United KingdomContact: support@overvue.ai

2. Key Points About Your Data

What We Collect: Your name, email, optional company domain, voice recordings, transcripts, performance data, custom bot configurations, screening interview responses, and (where applicable) iOS device information.
Your Data is Yours: You retain ownership of your personal data and can download or delete your recordings at any time, subject to the rights of any organisation that invited you to a screening interview.
How We Use It: To provide the training, screening, and practice services, generate your individual performance analytics, and improve our AI through anonymised, aggregated analysis.
Storage: Data is stored securely in Microsoft Azure UK datacentres.
Anonymised Insights: We anonymise and aggregate user data to create Platform Insights (benchmarks, trends) shared with users. These insights do not identify you, your company, or your specific conversations.
Three Products, Different Roles: For our Sales Training and Interview Practice Products, Overvue is generally the data controller. For our Recruiting Product, the inviting organisation is the controller of Candidate data, and Overvue acts as a processor (save where we use anonymised, aggregated data as a controller).
Training and Assessment Tool Only: Our Service is for training, screening, and practice purposes. AI bots and AI-generated assessments are fictional or probabilistic and do not represent real people or guaranteed outcomes.
Age Requirement: You must be at least 16 years old to use our Service.

3. What Data We Collect

3.1 Account Information

When you register for an account, we collect:

Full name
Email address
Company domain (optional, where applicable)
Password (stored in encrypted form)
Account creation date and settings
Account type (Sales Training, Recruiting, or Interview Practice)

For Candidates invited to a screening interview through the Recruiting Product, we may collect minimal account information sufficient to deliver the screening interview, as instructed by the inviting organisation.

3.2 Session Data (Sales Training, Recruiting, and Interview Practice)

During your use of the Service, we collect:

Voice Recordings: Audio recordings of your sales roleplay sessions, screening interviews, and interview practice sessions
Transcripts: Text transcriptions of your sessions generated by our AI transcription service
Performance Metrics: Session duration, scores, feedback ratings, speaking pace, objection handling effectiveness, screening assessment outputs, and other analytics
Conversation Content: The substance of your sessions, including questions asked, responses given, and techniques used

3.3 Custom Bot, Screening Interview, and Scenario Data

When you create custom bots, configure screening interviews, or set up interview practice scenarios, we collect and generate:

Input Data: Your company website or domain URL, role descriptions, screening question sets, and interview style preferences
AI-Generated Information: Company overview, business model, market position, competitors, fictional persona characteristics (speech style, pain points, job responsibilities), and scenario context
Your Edits: Any modifications you make to AI-generated configurations

3.4 Usage and Technical Data

We automatically collect:

Login dates and times
Features used and frequency of use
Browser type and version
Device information and operating system (including, on iOS, the device model, iOS version, and app version)
IP address and general location (country/city level)
Pages and screens visited and navigation paths
Scorecard results and performance history
App diagnostics and crash reports (iOS application only)

3.5 Payment Information

Payment processing is handled by third-party payment processors. We do not store full credit card details. We may retain or receive:

Last four digits of card number (for web payments via Stripe)
Payment method type
Billing address
Transaction history and invoice details
For iOS subscriptions: subscription identifiers, status, and renewal information provided by RevenueCat and Apple. Apple processes the underlying purchase, and we receive only limited information sufficient to provision and manage your subscription.

3.6 Communications

We collect information from your communications with us, including:

Support requests and correspondence
Feedback and suggestions
Survey responses

4. How We Use Your Data

4.1 Providing the Service to You

We use your data to:

Create and manage your account
Deliver AI-powered roleplay training, screening interviews, and interview practice sessions
Generate and store your session recordings and transcripts
Provide personalised performance analytics and feedback
Create custom bot personas, screening interviews, and practice scenarios
Provide and track scorecard results and performance history
Process payments and manage subscriptions (including via RevenueCat and Apple for iOS)
Provide customer support and respond to your inquiries
Send service-related communications (account notifications, updates, security alerts)
Where you participate as a Candidate in the Recruiting Product, deliver the screening interview and make the resulting recordings, transcripts, and AI-generated assessments available to the inviting organisation in accordance with their instructions

4.2 Service Improvement and Platform Insights

We anonymise and aggregate your data to:

Train and Improve AI Models: We use anonymised transcripts, conversation patterns, and performance data to refine our AI algorithms, improve bot responses, and enhance the realism of roleplay, screening, and interview practice scenarios. We do not use raw audio recordings to train AI models.
Generate Platform Insights: We create anonymised, aggregated benchmarks and trends such as:
- Common objection types and effective responses across industries
- Average performance metrics by experience level
- Successful conversation techniques and patterns
- Industry-specific best practices and benchmarks
- Trending interview formats and effective preparation strategies
Develop New Features: We analyse usage patterns to identify opportunities for new training scenarios, bot personas, screening templates, and platform capabilities
Quality Assurance: We monitor service performance and identify technical issues or areas for improvement

Important: Platform Insights are derived from data that has been anonymised and aggregated such that individual users, their companies, Candidates, or specific conversations cannot be identified. These insights are made available to users to enhance the training and assessment experience.

4.3 Research and Development

We conduct research using Aggregated Data to:

Study sales communication, screening, and interview effectiveness
Develop new AI training and assessment methodologies
Create industry reports and whitepapers
Advance the field of conversational AI and assessment technology

4.4 Legal and Security Purposes

We may use your data to:

Comply with legal obligations and respond to lawful requests
Enforce our Terms of Service and investigate violations
Detect and prevent fraud, abuse, or security threats
Protect our rights, property, and safety, and that of our users
Investigate suspicious account activity or Fair Play Policy violations

With your explicit consent, we may use your email address to send you:

Product updates and new feature announcements
Tips and best practices for using the Service
Educational content and training resources
Special offers and promotional materials

You may withdraw consent and unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or contacting us directly.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

5.1 Contract Performance

Processing is necessary to provide the Service you have contracted for, including creating your account, delivering training, screening, or interview practice sessions, generating analytics, and processing payments.

5.2 Legitimate Interests

We have a legitimate interest in:

Using anonymised transcripts and performance data to train and improve our AI models
Creating and sharing Platform Insights derived from Aggregated Data to enhance the value of our Service for all users
Developing new features and improving service quality
Ensuring platform security and preventing abuse
Conducting research and development in conversational AI and assessment technology

We have carefully balanced these interests against your rights and freedoms and believe our processing does not override your interests, particularly given the anonymisation and aggregation measures we apply.

5.3 Legal Obligations

We process data as necessary to comply with legal and regulatory requirements, including tax obligations, anti-money laundering laws, and court orders.

For certain processing activities, such as marketing communications, use of cookies beyond strictly necessary ones, and (where applicable) participation as a Candidate in a screening interview, we obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5.5 Recruiting Product — Roles

For the Recruiting Product, the inviting organisation acts as the data controller with respect to Candidate personal data, and Overvue acts as a processor on the controller's documented instructions. Where Overvue uses Candidate data in anonymised, aggregated form to improve the Service or to generate Platform Insights, Overvue acts as a controller of that anonymised data.

6.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

6.2 Service Providers and Technology Partners

We share data with carefully selected third-party service providers who assist in delivering the Service, including:

AI and Voice Technology Providers: To power voice interaction, transcription, AI analysis, and conversation capabilities. This includes Ultravox as our voice provider for the Interview Practice Product (B2C).
Cloud Hosting: Microsoft Azure (UK datacentres) for secure data storage and platform infrastructure.
Payment Processors: Stripe (for web-based payments) and RevenueCat together with Apple (for iOS subscriptions) to process payments and manage billing.
Analytics Tools: To understand service usage and improve user experience.
Research Tools: To gather public information when creating custom bots and screening interviews.

We share only the minimum data necessary for these providers to perform their functions. We do not share your personally identifiable information (such as name, email, or account details) with AI providers beyond what is necessary to deliver the Service. We maintain contractual agreements with all service providers requiring them to protect your data and use it only for specified purposes.

6.3 Inviting Organisations (Recruiting Product)

Where you participate in a screening interview as a Candidate via the Recruiting Product, we share your screening interview recording, transcript, performance metrics, and AI-generated assessment with the inviting organisation. The inviting organisation is the controller of that data and is responsible for its further use, retention, and disclosure. You should review the inviting organisation's privacy notice for information about how they handle your data.

6.4 Platform Insights Shared With Users

We share Platform Insights derived from anonymised, Aggregated Data with users of the Service. These insights include benchmarks, trends, and best practices but do not reveal any information that could identify you, your company, the inviting organisation, your specific prospects, or your individual conversations.

6.5 Legal Requirements

We may disclose your data if required to do so by law or in response to:

Court orders, subpoenas, or other legal processes
Requests from law enforcement or government agencies
Legal claims or disputes
Investigations of potential violations of our Terms of Service

6.6 Business Transfers

If Overvue is involved in a merger, acquisition, asset sale, or bankruptcy, your data may be transferred to the acquiring entity. We will notify you of any such change and provide information about choices you may have regarding your data.

We may share your data for purposes not described in this Privacy Policy if we obtain your explicit consent to do so.

7. Data Storage and Security

7.1 Where We Store Your Data

Your data is stored in Microsoft Azure datacentres located in the United Kingdom. We use UK-based infrastructure to ensure compliance with UK and EU data protection requirements and to minimise international data transfers.

7.2 Security Measures

We implement comprehensive technical and organisational security measures to protect your data, including:

Encryption: Data is encrypted in transit using TLS/SSL protocols and at rest using industry-standard encryption algorithms
Access Controls: Role-based access controls ensure only authorised personnel can access user data, with access logged and monitored
Authentication: Secure authentication mechanisms including password hashing and optional multi-factor authentication
Network Security: Firewalls, intrusion detection systems, and regular security audits
Data Isolation: User data is logically isolated to prevent unauthorised cross-customer access
Regular Testing: Penetration testing and vulnerability assessments
Employee Training: Staff are trained on data protection principles and security best practices
Incident Response: Procedures for detecting, responding to, and reporting security incidents

7.3 Data Backup and Recovery

We perform regular automated backups of your data to ensure business continuity and disaster recovery. Backups are encrypted and stored securely in geographically redundant locations within the UK/EU.

7.4 Limitations of Security

While we implement robust security measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the security of your account credentials and should notify us immediately of any unauthorised access.

8. Data Retention

8.1 Active Account Data

We retain your personal data for as long as your account is active and as necessary to provide the Service, including:

Account information: For the duration of your subscription
Session recordings and transcripts: Until you delete them or close your account
Custom bot, screening interview, and scenario configurations: Until you delete them or close your account
Performance analytics: For the duration of your subscription to enable historical tracking
Scorecard results and performance history: For the duration of your subscription
Candidate data (Recruiting Product): For the period instructed by the inviting organisation, subject to applicable law

8.2 Post-Account Deletion

When you delete your account or your subscription ends:

Active Deletion: We will delete your identifiable personal data, session recordings, transcripts, and custom configurations within 30 days
Backup Retention: Deleted data may persist in backup systems for up to 90 days before being permanently purged
Legal Retention: Some data may be retained longer if required by law (e.g., financial records for tax purposes, typically 6-7 years)
Aggregated Data: Data that has been anonymised and incorporated into Aggregated Data sets may be retained indefinitely, as it no longer constitutes personal data

8.3 Anonymised and Aggregated Data

Once your data has been anonymised and aggregated such that you cannot be identified, it is no longer considered personal data under data protection laws. We may retain such Aggregated Data indefinitely for Platform Insights, AI training, research, and service improvement purposes. Once data is anonymised and aggregated, it is typically not possible to identify or extract your original specific data.

8.4 Retention Periods Summary

Active account data: Duration of subscription
Post-deletion (identifiable data): 30 days (up to 90 days in backups)
Financial/tax records: 6-7 years from transaction date
Anonymised Aggregated Data: Indefinitely
Marketing consent records: 3 years from last interaction
Candidate data (Recruiting Product): As instructed by the inviting organisation

9. Your Rights

Under UK GDPR and applicable data protection laws, you have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. You can access most of your data directly through your account dashboard. For additional information, contact us at support@overvue.ai. If you participated as a Candidate in the Recruiting Product, requests relating to that data should generally be directed to the inviting organisation, who is the controller of your data in that context.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update your account information directly through your account settings. For other corrections, contact our support team.

9.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances, including:

The data is no longer necessary for the purposes for which it was collected
You withdraw consent (where processing is based on consent)
You object to processing based on legitimate interests
The data has been unlawfully processed

You can delete individual session recordings at any time through your account. To request full account deletion, contact support@overvue.ai. Please note that once data has been anonymised and incorporated into Aggregated Data, it may not be possible to identify or delete your original data from such datasets. Erasure requests relating to Candidate data in the Recruiting Product should be directed to the inviting organisation.

9.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. You can download your session recordings and export your data through your account settings.

9.6 Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. This includes objecting to direct marketing at any time. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. You can manage your consent preferences in your account settings.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have violated your data protection rights. Contact details:

Information Commissioner's OfficeWycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AFTelephone: 0303 123 1113Website: www.ico.org.uk

9.9 Exercising Your Rights

To exercise any of these rights, please contact us at support@overvue.ai with your request. We will respond within one month, though this may be extended by two months for complex requests. We may request additional information to verify your identity before processing your request. There is no fee for exercising your rights unless your request is manifestly unfounded or excessive.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device that help us provide and improve the Service. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period). On the iOS application, we use equivalent device identifiers and local storage mechanisms.

10.2 How We Use Cookies

We use cookies and equivalent technologies for:

Essential Cookies: Required for the Service to function, including authentication, security, and session management
Performance Cookies: To understand how users interact with the Service and identify technical issues
Functionality Cookies: To remember your preferences and settings
Analytics Cookies: To analyse usage patterns and improve the Service

10.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of the Service. Most browsers allow you to refuse cookies or delete cookies already set. Visit your browser's help section for more information. On iOS, you can manage tracking and analytics permissions through your device settings.

10.4 Third-Party Cookies

Some cookies may be placed by third-party service providers we use for analytics or other purposes. These third parties have their own privacy policies governing their use of your information.

11. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. However, some of our third-party service providers may be located outside the UK/EU. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the UK ICO
Adequacy decisions recognising equivalent data protection standards
Binding Corporate Rules or other approved mechanisms

We take steps to ensure that international transfers comply with applicable data protection laws and that your data receives an adequate level of protection.

12. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from anyone under 16 years of age. If you are under 16, do not use the Service or provide any personal information to us. If we discover that we have collected personal data from someone under 16 without appropriate consent, we will delete that information as quickly as possible. If you believe we have collected data from someone under 16, please contact us immediately at support@overvue.ai.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Last Updated" date at the top of this Privacy Policy
Notify you through the Service or by email to your registered email address
Post the updated Privacy Policy on our website

Material changes will become effective 30 days after posting or notification, whichever is earlier. Your continued use of the Service after the effective date constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically. If you do not agree with any changes, you should stop using the Service before the changes take effect.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Overvue.ai Ltd Company Number: 16108402 Email: support@overvue.ai Registered Address: 8 Winchester Place, North Street, Poole, BH15 1NX, United Kingdom

We aim to respond to all privacy inquiries and requests within 2 business days. For data subject rights requests, we will respond within the timeframes required by applicable law (typically one month).

15. Data Protection Officer

For data protection matters specifically, you may contact our designated representative at support@overvue.ai with "Data Protection Query" in the subject line.