Privacy Policy.

Effective date: February 2026

Overtime ("we", "our", "us") is a product of Distract LLC FZ, a company registered in Dubai, United Arab Emirates. This policy explains how we collect, use, and protect your information when you use our platform at overtime.systems and our marketing site at tryovertime.com.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, you must not use the Service.

1. Information We Collect

Account information: When you sign up, we collect your name, email address, and profile picture via Google or Microsoft OAuth. We do not store passwords.

Advertising account data: When you connect your Google Ads or other advertising accounts, our AI agents access campaign data including keywords, bids, budgets, ad copy, search terms, and performance metrics. This data is used solely to manage and optimise your campaigns.

Payment information: We collect billing details through Stripe. We do not store credit card numbers on our servers. All payment data is handled by Stripe in accordance with PCI DSS standards.

Chat conversations: Messages you send to Olivia, our AI account manager, are stored to provide context for ongoing support. Conversations are scoped to your account and are not shared with other clients.

Usage data: We collect standard usage data including pages visited, features used, and session duration to improve the platform.

2. How We Use Your Information

• To provide and operate our AI marketing agents on your advertising accounts
• To generate audit reports, performance summaries, and campaign recommendations
• To process payments and manage your subscription
• To send transactional emails including audit reports, weekly briefings, and billing receipts
• To respond to your messages via Olivia and fulfil change requests
• To improve our platform, agents, and services

3. Data Sharing

We do not sell your personal information. We share data only with the following categories of service providers, and only to the extent necessary to operate the platform:

• Stripe — payment processing
• Anthropic — AI processing for Olivia chat responses (messages are sent without personally identifiable client information where possible)
• Postmark — transactional email delivery
• Google — OAuth authentication and Google Ads API access
• Microsoft — OAuth authentication
• Railway — infrastructure hosting

4. Advertising Account Access

When you connect an advertising account, you grant our AI agents read and write access to manage campaigns on your behalf. This includes the ability to adjust bids, pause campaigns, add negative keywords, reallocate budgets, and create ad copy variations.

You can override any agent action at any time through your dashboard. You can disconnect your advertising accounts at any time through Settings, which immediately revokes agent access.

5. Data Security

We implement appropriate technical and organisational measures to protect your data:

• OAuth-only authentication — no passwords stored
• All API communications over HTTPS
• JWT tokens with 15-minute expiry for session management
• Database queries scoped by client ID at the ORM layer, ensuring data isolation between clients
• Agent API access restricted by API key and IP allowlist
• Stripe webhook verification via cryptographic signatures

6. Data Retention

We retain your account data and campaign history for as long as your account is active. If you cancel your subscription, we retain your data for 12 months in case you reactivate, after which it is permanently deleted. You can request immediate deletion at any time by contacting us.

7. International Data Transfers

Distract LLC FZ is based in Dubai, UAE. Your data may be processed and stored in locations outside your country of residence, including the UAE, the United States, and the European Union, depending on the infrastructure providers used. By using the Service, you consent to such transfers.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise any of these rights, contact us at hello@overtime.systems. We will respond within 30 days.

9. Cookies

We use essential cookies only — session management and authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

10. Children

Our Service is not directed at individuals under 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the platform. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this privacy policy or our data practices, contact us at:

Distract LLC FZ
Dubai, United Arab Emirates
Email: hello@overtime.systems