Privacy Policy

Effective date: April 26, 2026

1. Introduction

Cooperativ, Inc. (“Cooperativ,” “we,” “us,” or “our”) operates the Overlord platform (“Service”). This Privacy Policy describes how we collect, use, and share information about you when you use the Service.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use the Service.

2. Information We Collect

We collect the following categories of information:

Account Information

When you create an account, we collect your email address, name, and any other information you provide during registration or onboarding.

Usage Data

We automatically collect information about how you use the Service, including pages visited, features used, tickets created, agent sessions initiated, and time spent on the platform.

Content You Submit

We collect the content of tickets, objectives, agent instructions, and other data you input into the Service.

Device and Technical Information

We collect IP addresses, browser type, operating system, device identifiers, and similar technical information when you access the Service.

Integration Data

If you connect third-party services (such as GitHub, Linear, or AI coding agents), we may receive information from those services as permitted by their terms and your authorization.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service;
  • Authenticate users and manage accounts;
  • Process transactions and send related information;
  • Respond to comments, questions, and support requests;
  • Send technical notices, updates, security alerts, and administrative messages;
  • Monitor and analyze usage patterns to improve the Service and user experience;
  • Detect and prevent fraud, abuse, and security incidents;
  • Comply with legal obligations.

We do not sell your personal information or use your ticket content to train AI models without your explicit consent.

4. Sharing of Information

We may share your information in the following circumstances:

Service Providers

We share information with third-party vendors who perform services on our behalf, such as hosting (Vercel, Supabase), analytics (Vercel Analytics), error tracking (Sentry), and payment processing (Stripe). These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Business Transfers

If Cooperativ is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Cooperativ, our users, or the public.

With Your Consent

We may share your information in other ways with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or legitimate business purposes.

6. Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, loss, destruction, or alteration. These measures include encryption in transit and at rest, access controls, and regular security reviews. However, no security system is impenetrable, and we cannot guarantee the absolute security of your information.

7. Cookies and Tracking

We use cookies and similar tracking technologies to operate the Service, remember your preferences, and analyze usage. You can control cookies through your browser settings; however, disabling certain cookies may affect the functionality of the Service.

8. Third-Party Services

The Service integrates with and links to third-party services. This Privacy Policy does not apply to those third-party services, and we encourage you to review their privacy policies. We are not responsible for the privacy practices of third parties.

9. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you;
  • Correction: Request correction of inaccurate or incomplete information;
  • Deletion: Request deletion of your personal information, subject to certain exceptions;
  • Portability: Receive your data in a machine-readable format;
  • Objection: Object to certain processing of your information.

To exercise any of these rights, please contact us at privacy@cooperativ.io. We will respond to your request within 30 days.

10. Children's Privacy

The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

11. International Transfers

Cooperativ is based in the United States, and your information may be stored and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your home country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service or by email at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: privacy@cooperativ.io

See also our Terms of Service.