Privacy Policy.

Effective date: March 2026

Overtime ("we", "our", "us") is a product of Suspense Ltd, a company registered in England and Wales (company number 11794853). This policy explains how we collect, use, and protect your information when you use our platform at overtime.systems and our marketing site at tryovertime.com.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, you must not use the Service.

1. Information We Collect

Account information: When you sign up, we collect your name, email address, and profile picture via Google or Microsoft OAuth. We do not store passwords.

Advertising account data: When you connect your Google Ads or other advertising accounts, our automated AI agents access campaign data including keywords, bids, budgets, ad copy, search terms, and performance metrics. This data is used solely to assist with campaign management and optimisation under your supervision.

Payment information: We collect billing details through Stripe. We do not store credit card numbers on our servers. All payment data is handled by Stripe in accordance with PCI DSS standards.

Chat conversations: Messages you send to Olivia, our automated AI account manager, are stored to provide context for ongoing support. Olivia is an AI system, not a human. Conversations are scoped to your account and are not shared with other clients.

Usage data: We collect standard usage data including pages visited, features used, and session duration to improve the platform.

2. How We Use Your Information

• To provide and operate our automated AI marketing agents on your advertising accounts under your supervision
• To generate audit reports, performance summaries, and campaign recommendations
• To process payments and manage your subscription
• To send transactional emails including audit reports, weekly briefings, and billing receipts
• To respond to your messages via Olivia and fulfil change requests
• To improve our platform, agents, and services

3. Data Sharing

We do not sell your personal information. We share data only with the following categories of service providers, and only to the extent necessary to operate the platform:

• Stripe — payment processing
• Anthropic — AI processing for Olivia chat responses (messages are sent without personally identifiable client information where possible)
• Postmark — transactional email delivery
• Google — OAuth authentication and Google Ads API access
• Microsoft — OAuth authentication
• Railway — infrastructure hosting
• Google Analytics — anonymised website usage analytics

4. Advertising Account Access

When you connect an advertising account, you grant our automated AI agents read and write access to assist with campaign management on your behalf. This includes the ability to adjust bids, pause campaigns, add negative keywords, reallocate budgets, and create ad copy variations. Our agents are automated software tools designed to operate under your supervision — they are not a substitute for professional marketing oversight.

You can override any agent action at any time through your dashboard. You can disconnect your advertising accounts at any time through Settings, which immediately revokes agent access. You are responsible for monitoring agent activity and ensuring it aligns with your business objectives.

5. Data Security

We implement appropriate technical and organisational measures to protect your data:

• OAuth-only authentication — no passwords stored
• All API communications over HTTPS
• JWT tokens with 15-minute expiry for session management
• Database queries scoped by client ID at the ORM layer, ensuring data isolation between clients
• Agent API access restricted by API key and IP allowlist
• Stripe webhook verification via cryptographic signatures

6. Data Retention

We retain your account data and campaign history for as long as your account is active. If you cancel your subscription, we retain your data for 12 months in case you reactivate, after which it is permanently deleted. You can request immediate deletion at any time by contacting us.

7. International Data Transfers

Suspense Ltd is based in London, United Kingdom. Your data may be processed and stored in locations outside your country of residence, including the United Kingdom, the United States, and the European Union, depending on the infrastructure providers used. By using the Service, you consent to such transfers.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise any of these rights, contact us at hello@overtime.systems. We will respond within 30 days.

9. Cookies and Analytics

We use essential cookies for session management and authentication. We also use Google Analytics (GA4) to understand how users interact with our platform. Google Analytics collects anonymised usage data including pages visited, session duration, and referral sources. This data is processed by Google in accordance with their privacy policy. We do not use advertising cookies or retargeting pixels.

10. Children

Our Service is not directed at individuals under 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the platform. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this privacy policy or our data practices, contact us at:

Suspense Ltd
3rd Floor, Paul Street, London, England, EC2A 4NE
Company number: 11794853
Email: hello@overtime.systems