Privacy
policy.
Overlord AI watches your game to help you, so it handles your screen and, when you ask out loud, your voice. This policy says exactly what we collect, where it goes, how long it's kept and what you can do about it. We don't sell your personal information.
1 Who we are
Overlord AI is a dba of Primus Enterprises LLC, a Florida limited liability company, 411 W 1st St, Unit #5073, Sanford, FL 32771, United States. We are responsible for the personal data described here. Privacy questions and requests go to privacy@overlordai.co.
This policy covers the Overlord AI desktop app for Windows and Linux, our cloud service that the app talks to, and our website at www.overlordai.co.
2 The short version
| What | When | Where it goes |
|---|---|---|
| Frames of your screen | Only while a game is running: when you ask, and automatically from time to time during play (section 3) | Our cloud service, then DeepSeek or Google Gemini to read them. Not stored by us. |
| Your voice | Only after you press F4 to ask out loud | Our cloud service, then Google Gemini to turn it into text. Not stored by us. |
| Questions and answers as text | When you ask, or the app needs an answer | Google Gemini or DeepSeek through our service; spoken answers through Google Cloud Text-to-Speech |
| Account details | When you sign up | Supabase (our database and sign-in provider) |
| Licence, trial and usage records | While you use the app | Supabase |
| Payment details | When you buy | Our payment provider only, once paid plans open. We never see your card. |
| Key presses, saves, game files | While you play | Nowhere. They stay on your PC (section 5). |
3 Your screen
You choose what Overlord AI can see. The first time, your operating system asks you to pick a screen to share. Overlord AI captures that whole screen (monitor), not just the game window, so close anything private on it or share a different screen. On Linux your choice is remembered so you aren't asked at every launch. Capture runs only while a game is running: it starts when Overlord AI detects your game and shuts off when it detects the game has closed. You can also stop it at any time from your system's screen-sharing controls or by closing the app.
When frames are sent
- When you ask. Pressing F4, or asking a question, sends the current frame with your question.
- Automatically, during play. To notice in-game conversations and keep its tip cards up to date, the app also checks the screen on its own: about every 15 seconds while you explore, slowing to once every 5 minutes when nothing turns up, and as often as every 4 seconds during an in-game conversation. A frame isn't sent if that part of the screen hasn't changed.
Where frames go
Frames go over an encrypted connection (HTTPS) to our cloud service on Google Cloud, which checks your sign-in and passes the frame to an AI model to read it: DeepSeek or Google Gemini. The answer comes back to your PC. Our service doesn't save frames. DeepSeek and Google handle the frames they receive under their own terms (section 9).
Screen capture starts only when Overlord AI detects that a game is running, and it shuts off when it detects that the game has closed. Frames are held in short-term memory (RAM), never written to disk: older ones are deleted within about 30 seconds, the rest are discarded when capture shuts off, and nothing survives a restart. On Windows, frames are kept briefly in the system's temporary folder instead and are deleted within about 30 seconds. Overlord AI doesn't record video of your sessions.
4 Your voice and the co-pilot's voice
The microphone is only used after you press F4 to ask out loud, and recording stops when you stop talking. The recording goes through our cloud service to Google Gemini, which turns it into text, and the text is used to answer you. Our service doesn't save recordings. On your PC, the recording is kept in a single temporary file that your next question overwrites. On a PC that has on-device speech recognition installed, the recording is transcribed there instead and isn't sent.
The co-pilot's voice comes from Google Cloud Text-to-Speech: the text of each spoken answer goes through our service to Google, and the audio comes back. The startup and goodbye lines are recordings that ship with the app. Your personal greeting ("Welcome back, …") uses the display name from your account; it's made once and then saved on your PC.
5 What stays on your PC
- Key presses. The app listens for the F4 key, and while a combo card is open it notices which buttons you press so it can tick off each step. Key presses never leave your PC. The app never sends key presses or mouse movements to a game.
- Your game and your progress. To know which game you're playing, Overlord AI reads the install records of Steam, GOG Galaxy and the Epic Games Launcher. To guide you, it reads your progress, stats and inventory from your game's save files, some of its settings files (for example, your button layout), and the game's own data files on your PC to name your items and work out what you can craft. It only reads them: it never changes a save or a game file, and neither your saves nor the game's files ever leave your PC. You can switch save reading off at any time in Settings › Reconfigure permissions.
- What is sent with a question. When you ask a question, or Overlord offers a tip, it sends a short summary so the answer fits your game: the game, your level and stats, your current mission, and a summary of your inventory. Nothing else from your saves is sent.
- What is kept. While you're signed in, we keep one progress summary per game on your account, so Overlord can pick up where you left off on any PC: the game, your level, your location, your current mission, the missions you've completed, and a summary of your inventory. Your stats go with a question but are not kept. Each newer summary replaces the last; we keep no history. It is deleted when you delete your account. Signed out, nothing is kept.
- What never happens. Overlord AI never edits a save, never uploads a raw save file, never uploads the game's data files or anything built from them (only your own item names go in your summary), and never reads or changes your game's memory.
- Game memory. The app never reads or changes a game's memory, and never injects code into a game.
- Settings and progress you make in the app, and a cache of guides and your personal greeting.
6 Your account, licence and usage
We keep these in Supabase, linked to your account:
- Account: your email address, display name and password (stored by Supabase as a hash). If you sign in with Google or Apple, we receive the name, email and profile photo they share.
- Licence and trial: your plan, licence key, how much trial time you've used, and a device identifier: a one-way scrambled (hashed) version of your computer's machine ID, with the device name and operating system. This is how the trial is one per person and how plans count PCs.
- Usage: how many answers, voice lines and research requests your account used each day, and their estimated cost, so we can apply fair-use limits.
- Progress: your game sessions (which game, when they started and ended, how long), milestones such as bosses beaten, items found and areas reached, and whether a tip card was used. These power the stats on your dashboard.
- Game research: when you play a game we haven't mapped, the game's name and area names are researched from public sources (Google's Gemini with Google Search, with Anthropic's Claude on Google Cloud as a backup). The resulting guide is saved in our Google Cloud storage and linked to your account. It holds facts about the game, not about you.
- Which games people want: when you play a game we haven't mapped, the app sends its Steam ID with an anonymous install code (not linked to your account) so we know which games to map next.
- Founder Access and the waitlist: if you claim Founder Access we store your email, the plan you chose, any feedback you write, how you signed in, a referral code if you came from a partner link, and your browser type. Waitlist sign-ups store your email.
- Support: emails you send us.
7 Payments
Paid plans aren't on sale yet. When they open, orders will be processed by our payment provider, which acts as our reseller and merchant of record. It will collect your payment details, billing address and tax information under its own privacy policy, and we'll name it here before anyone is charged. We'll receive what we need to run your plan: your name, email, country, what you bought, and the status of your subscription. We never see or store your full card number. During Founder Access nothing is charged and no payment details are collected.
8 The website
The website is hosted by Vercel. When you visit, these tools can run:
- Vercel Web Analytics counts page views and the pages people visit, without cookies.
- Google Ads tag (gtag.js) measures whether our Google ads lead to visits and sign-ups. It sets cookies and sends Google information about your visit.
- Reddit Ads pixel measures whether our Reddit ads lead to visits and sign-ups, and lets us show our ads on Reddit to people who visited. It sets cookies and sends Reddit information about your visit.
- Rewardful runs our partner (affiliate) program. If you arrive through a partner's link, it stores a referral code in a cookie so the partner can be credited.
- Sign-in on the website uses Supabase, which keeps your session in your browser's storage. Your light or dark theme and your cookie choice are saved there too.
Your choice
If you visit from the EU, EEA, UK or Switzerland, the Google Ads tag, the Reddit pixel and Rewardful don't load until you press Accept on our cookie banner. Everywhere else they load by default, and you can turn them off. Anyone can change their choice at any time with Cookie settings at the bottom of every page. If your browser sends a Global Privacy Control signal, we treat it as a Reject. The site works the same either way.
The app's installers are downloaded from GitHub Releases, which logs downloads under GitHub's own policy.
9 Who receives data
These companies process data for us, each only for the job listed:
| Company | What it handles | Why |
|---|---|---|
| Google Cloud (Cloud Run, Vertex AI, Cloud Storage, Text-to-Speech, Gemini API) | Our cloud service, screen frames and voice recordings sent for reading, text of spoken answers, game research | Runs our service, reads frames, transcribes speech, makes the voice |
| DeepSeek | Screen frames and question text | Reads frames and writes answers |
| Anthropic (Claude, hosted on Google Cloud) | Game names and area names | Backup for game research |
| Supabase | Account, licence, usage and progress records | Database and sign-in |
| Payment provider (named here when paid plans open) | Orders, payments, tax, receipts, refunds | Reseller and merchant of record |
| Vercel | Website visits | Website hosting and analytics |
| Google Ads | Website visits, with your consent where required | Measuring our ads |
| Website visits, with your consent where required | Measuring and showing our ads on Reddit | |
| Rewardful | Referral codes, sign-ups through partners | Partner program |
| Resend, Railway | Waitlist emails | Sending and receiving sign-ups |
| Proton | Emails you send us | Our email |
| GitHub | Installer downloads | Hosting the app's downloads |
We may also share data if the law requires it, to protect our users or our service from fraud or abuse, or as part of a sale or merger of our business, in which case this policy would still apply to it.
10 How long we keep it
| Data | How long |
|---|---|
| Screen frames | Up to about 30 seconds on your PC, held in RAM; discarded when the game closes and cleared by a restart. Not stored by our service. DeepSeek and Google keep what they receive according to their own terms. |
| Voice recordings | One temporary file on your PC, overwritten by your next question. Not stored by our service. |
| Account, licence and progress records | While your account is open. Deleted within 30 days after you ask us to delete your account. |
| Usage counts | While your account is open, then deleted with it. |
| Order records | As long as tax and accounting law requires (the payment provider keeps its own records). |
| Game research results | Kept to serve the guide again. Unlinked from you when your account is deleted. |
| Service logs | About 30 days. Logs record requests and errors, not your frames or recordings. |
| Founder Access, waitlist and support emails | Until you ask us to remove them, and no longer than two years after your last contact. |
11 How we use it
- To provide Overlord AI: answer your questions, show tip cards, speak, research games, run your account and plan (needed to perform our contract with you).
- To keep it fair and safe: one trial per person, device limits, fair-use limits, and preventing abuse (our legitimate interests).
- To improve it: deciding which games to map next and fixing what goes wrong (our legitimate interests).
- To talk to you: receipts, account notices and, with your permission, news about Overlord AI.
- To measure our ads and partner program on the website.
We don't sell your personal information, and we don't use your screen frames or recordings to build a profile of you. The Google Ads tag and the Reddit pixel on our website measure our ads, and the Reddit pixel lets us show our ads to past visitors; under some US state laws that can count as "sharing" for advertising. You can opt out with Cookie settings at the bottom of any page, or with a Global Privacy Control signal (section 8).
12 Your rights
Wherever you live, you can ask us to show you, correct or delete the personal data we hold about you, or to delete your account.
- EU, EEA, UK and Switzerland (GDPR): you also have the rights to restrict or object to processing, to data portability, and to withdraw consent at any time. You can complain to your local data protection authority.
- California and other US states: you can ask what we collect and why, ask us to delete or correct it, and opt out of the sale or sharing of your information. We don't sell it. We won't treat you differently for using these rights.
Email privacy@overlordai.co from the address on your account. We may need to confirm it's you. We answer within one month (45 days for requests under US state laws).
13 International transfers
We're based in the United States, and our service providers process data in the United States and other countries. DeepSeek processes the frames and text it receives in China. Where a provider offers standard contractual clauses or a similar safeguard for international transfers, we rely on it. By using the app's screen and voice features you understand that frames and recordings are processed in these countries.
14 Security
Everything the app sends travels over HTTPS. The app never holds AI provider keys: our cloud service adds them, after checking your sign-in. Your licence key is encrypted with your operating system's secure storage. No system is perfectly secure, and we'll tell you without undue delay if a breach affects your data.
15 Children
Overlord AI isn't for children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has given us personal data, write to privacy@overlordai.co and we'll delete it.
16 Changes
When what the app collects or sends changes, we update this policy in the same release and change the date at the top. For a material change, we'll email account holders before it takes effect.
17 Contact
Overlord AI
411 W 1st St, Unit #5073, Sanford, FL 32771, United States
Privacy: privacy@overlordai.co · Support: support@overlordai.co
Also see: Terms of Service · Refund Policy · End-user licence · Contact