Overe Corp ("overe.io", "Company", "we", "our", or "us") provides cybersecurity monitoring, threat detection, and security posture management services for Microsoft cloud environments.
This Privacy Policy explains how we collect, use, disclose, and protect personal data when individuals visit our website, use our platform, or otherwise interact with our services (collectively, the "Services").
We are committed to protecting personal data and processing it in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other applicable privacy regulations.
This Privacy Policy applies to:
This policy does not apply to third-party services or websites that may be linked from our Services.
Depending on the context in which personal data is processed, overe.io may act as either a data controller or a data processor.
We act as a data controller when processing personal data related to:
When customers use the overe.io platform and connect their Microsoft environments, overe.io processes certain personal data on behalf of the customer. In these cases:
Our processing of such data is governed by contractual agreements with our customers, including applicable Data Processing Agreements (DPA) available at https://www.overe.io/dpa
We may collect information that you provide directly to us, including:
When customers connect their Microsoft environments to overe.io, we may process operational and security data necessary to provide cybersecurity monitoring services.
This may include:
Important limitations apply to this processing:
This processing is performed on behalf of the customer and only to provide the contracted services.
To maintain secure access to the overe.io platform, we may process authentication-related information such as:
These mechanisms help protect user accounts and maintain the security of the platform.
When users access our website or platform, we may automatically collect certain technical information including:
This information helps us maintain system security, troubleshoot issues, and improve the Services.
overe.io is designed to process only the minimum amount of personal data necessary to provide cybersecurity monitoring services.
Where possible, our systems process metadata and security telemetry rather than user-generated content. We intentionally limit access to customer environments to the permissions required to detect and investigate security events.
Our website may use cookies or similar technologies to:
Users may control cookie preferences through their browser settings.
We use personal data to:
Where GDPR applies, we process personal data under one or more of the following legal bases:
When overe.io processes personal data on behalf of customers, the customer determines the lawful basis for processing, and overe.io processes such data according to the customer’s instructions and the applicable Data Processing Agreement (DPA)..
We do not sell personal data.
We may share personal data with trusted third-party service providers ("subprocessors") that assist us in operating our Services, including:
These providers are contractually required to process personal data only according to our instructions and to maintain appropriate data protection safeguards.
We may also disclose personal data if required by law, regulation, or legal process.
We maintain an up-to-date list of subprocessors on our Trust Center at https://trust.overe.io, including details about the services they provide. All subprocessors are required to maintain appropriate security and data protection safeguards and are contractually obligated to process personal data only according to our instructions.
We periodically review our subprocessors to ensure they continue to meet our security and data protection standards.
Our Services are hosted using cloud infrastructure that may operate in multiple geographic regions, including the European Union and the United States.
Where personal data is transferred outside the European Economic Area (EEA), we implement appropriate safeguards such as:
We retain personal data only for as long as necessary to:
Customer data processed through the overe.io platform is retained according to contractual agreements with customers.
If services are terminated, customer data is deleted from the overe.io platform within a defined retention period in accordance with our internal data retention policies.
overe.io maintains administrative, technical, and organizational safeguards designed to protect personal data, including:
While we take reasonable measures to protect data, no system can guarantee absolute security.
If overe.io becomes aware of a confirmed security incident involving personal data under our control, we will investigate the matter and take appropriate steps to mitigate the impact.
Where required by applicable law or contractual obligations, we will notify affected customers without undue delay.
Depending on applicable law, individuals may have the right to:
Where overe.io processes personal data on behalf of a customer, requests should normally be directed to the relevant customer organization acting as the data controller.
Our Services are intended for use by businesses and are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.
We may update this Privacy Policy periodically to reflect changes to our Services, legal requirements, or data processing practices.
When changes are made, the updated version will be posted with a revised "Last Updated" date.
If you have questions about this Privacy Policy or our data protection practices, please contact us:
Email: hello@overe.io