OVR · legal · privacy

Privacy
policy.

Version 2.1Last updated 17 October 2026Covers the app, the website and our cloud service

Overlord AI watches your game to help you, so it handles your screen and, when you ask out loud, your voice. This policy says exactly what we collect, where it goes, how long it's kept and what you can do about it. We don't sell your personal information.

Contents 1 Who we are · 2 The short version · 3 Your screen · 4 Your voice and the co-pilot's voice · 5 What stays on your PC · 6 Your account, licence and usage · 7 Payments · 8 The website · 9 Who receives data · 10 How long we keep it · 11 How we use it · 12 Your rights · 13 International transfers · 14 Security · 15 Children · 16 Changes · 17 Contact

1 Who we are

Overlord AI is a dba of Primus Enterprises LLC, a Florida limited liability company, 411 W 1st St, Unit #5073, Sanford, FL 32771, United States. We are responsible for the personal data described here. Privacy questions and requests go to privacy@overlordai.co.

This policy covers the Overlord AI desktop app for Windows and Linux, our cloud service that the app talks to, and our website at www.overlordai.co.

2 The short version

WhatWhenWhere it goes
Frames of your screenOnly while a game is running: when you ask, and automatically from time to time during play (section 3)Our cloud service, then DeepSeek or Google Gemini to read them. Not stored by us.
Your voiceOnly after you press F4 to ask out loudOur cloud service, then Google Gemini to turn it into text. Not stored by us.
Questions and answers as textWhen you ask, or the app needs an answerGoogle Gemini or DeepSeek through our service; spoken answers through Google Cloud Text-to-Speech
Account detailsWhen you sign upSupabase (our database and sign-in provider)
Licence, trial and usage recordsWhile you use the appSupabase
Payment detailsWhen you buyOur payment provider only, once paid plans open. We never see your card.
Key presses, saves, game filesWhile you playNowhere. They stay on your PC (section 5).

3 Your screen

You choose what Overlord AI can see. The first time, your operating system asks you to pick a screen to share. Overlord AI captures that whole screen (monitor), not just the game window, so close anything private on it or share a different screen. On Linux your choice is remembered so you aren't asked at every launch. Capture runs only while a game is running: it starts when Overlord AI detects your game and shuts off when it detects the game has closed. You can also stop it at any time from your system's screen-sharing controls or by closing the app.

When frames are sent

Where frames go

Frames go over an encrypted connection (HTTPS) to our cloud service on Google Cloud, which checks your sign-in and passes the frame to an AI model to read it: DeepSeek or Google Gemini. The answer comes back to your PC. Our service doesn't save frames. DeepSeek and Google handle the frames they receive under their own terms (section 9).

Screen capture starts only when Overlord AI detects that a game is running, and it shuts off when it detects that the game has closed. Frames are held in short-term memory (RAM), never written to disk: older ones are deleted within about 30 seconds, the rest are discarded when capture shuts off, and nothing survives a restart. On Windows, frames are kept briefly in the system's temporary folder instead and are deleted within about 30 seconds. Overlord AI doesn't record video of your sessions.

4 Your voice and the co-pilot's voice

The microphone is only used after you press F4 to ask out loud, and recording stops when you stop talking. The recording goes through our cloud service to Google Gemini, which turns it into text, and the text is used to answer you. Our service doesn't save recordings. On your PC, the recording is kept in a single temporary file that your next question overwrites. On a PC that has on-device speech recognition installed, the recording is transcribed there instead and isn't sent.

The co-pilot's voice comes from Google Cloud Text-to-Speech: the text of each spoken answer goes through our service to Google, and the audio comes back. The startup and goodbye lines are recordings that ship with the app. Your personal greeting ("Welcome back, …") uses the display name from your account; it's made once and then saved on your PC.

5 What stays on your PC

6 Your account, licence and usage

We keep these in Supabase, linked to your account:

7 Payments

Paid plans aren't on sale yet. When they open, orders will be processed by our payment provider, which acts as our reseller and merchant of record. It will collect your payment details, billing address and tax information under its own privacy policy, and we'll name it here before anyone is charged. We'll receive what we need to run your plan: your name, email, country, what you bought, and the status of your subscription. We never see or store your full card number. During Founder Access nothing is charged and no payment details are collected.

8 The website

The website is hosted by Vercel. When you visit, these tools can run:

Your choice

If you visit from the EU, EEA, UK or Switzerland, the Google Ads tag, the Reddit pixel and Rewardful don't load until you press Accept on our cookie banner. Everywhere else they load by default, and you can turn them off. Anyone can change their choice at any time with Cookie settings at the bottom of every page. If your browser sends a Global Privacy Control signal, we treat it as a Reject. The site works the same either way.

The app's installers are downloaded from GitHub Releases, which logs downloads under GitHub's own policy.

9 Who receives data

These companies process data for us, each only for the job listed:

CompanyWhat it handlesWhy
Google Cloud (Cloud Run, Vertex AI, Cloud Storage, Text-to-Speech, Gemini API)Our cloud service, screen frames and voice recordings sent for reading, text of spoken answers, game researchRuns our service, reads frames, transcribes speech, makes the voice
DeepSeekScreen frames and question textReads frames and writes answers
Anthropic (Claude, hosted on Google Cloud)Game names and area namesBackup for game research
SupabaseAccount, licence, usage and progress recordsDatabase and sign-in
Payment provider (named here when paid plans open)Orders, payments, tax, receipts, refundsReseller and merchant of record
VercelWebsite visitsWebsite hosting and analytics
Google AdsWebsite visits, with your consent where requiredMeasuring our ads
RedditWebsite visits, with your consent where requiredMeasuring and showing our ads on Reddit
RewardfulReferral codes, sign-ups through partnersPartner program
Resend, RailwayWaitlist emailsSending and receiving sign-ups
ProtonEmails you send usOur email
GitHubInstaller downloadsHosting the app's downloads

We may also share data if the law requires it, to protect our users or our service from fraud or abuse, or as part of a sale or merger of our business, in which case this policy would still apply to it.

10 How long we keep it

DataHow long
Screen framesUp to about 30 seconds on your PC, held in RAM; discarded when the game closes and cleared by a restart. Not stored by our service. DeepSeek and Google keep what they receive according to their own terms.
Voice recordingsOne temporary file on your PC, overwritten by your next question. Not stored by our service.
Account, licence and progress recordsWhile your account is open. Deleted within 30 days after you ask us to delete your account.
Usage countsWhile your account is open, then deleted with it.
Order recordsAs long as tax and accounting law requires (the payment provider keeps its own records).
Game research resultsKept to serve the guide again. Unlinked from you when your account is deleted.
Service logsAbout 30 days. Logs record requests and errors, not your frames or recordings.
Founder Access, waitlist and support emailsUntil you ask us to remove them, and no longer than two years after your last contact.

11 How we use it

We don't sell your personal information, and we don't use your screen frames or recordings to build a profile of you. The Google Ads tag and the Reddit pixel on our website measure our ads, and the Reddit pixel lets us show our ads to past visitors; under some US state laws that can count as "sharing" for advertising. You can opt out with Cookie settings at the bottom of any page, or with a Global Privacy Control signal (section 8).

12 Your rights

Wherever you live, you can ask us to show you, correct or delete the personal data we hold about you, or to delete your account.

Email privacy@overlordai.co from the address on your account. We may need to confirm it's you. We answer within one month (45 days for requests under US state laws).

13 International transfers

We're based in the United States, and our service providers process data in the United States and other countries. DeepSeek processes the frames and text it receives in China. Where a provider offers standard contractual clauses or a similar safeguard for international transfers, we rely on it. By using the app's screen and voice features you understand that frames and recordings are processed in these countries.

14 Security

Everything the app sends travels over HTTPS. The app never holds AI provider keys: our cloud service adds them, after checking your sign-in. Your licence key is encrypted with your operating system's secure storage. No system is perfectly secure, and we'll tell you without undue delay if a breach affects your data.

15 Children

Overlord AI isn't for children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has given us personal data, write to privacy@overlordai.co and we'll delete it.

16 Changes

When what the app collects or sends changes, we update this policy in the same release and change the date at the top. For a material change, we'll email account holders before it takes effect.

17 Contact

Overlord AI
411 W 1st St, Unit #5073, Sanford, FL 32771, United States
Privacy: privacy@overlordai.co · Support: support@overlordai.co

Also see: Terms of Service · Refund Policy · End-user licence · Contact