Privacy Policy

This Privacy Policy explains how OverlayFly ("we", "our", "us") collects, uses, shares, and protects information when you use our website, desktop integration, and related services, including flight planning, in-flight monitoring, AI tools, speech-to-text features, online network integrations, and subscription billing.

We may collect the following categories of information:

• Account details: name, email address, and authentication/session identifiers.
• Subscription and billing metadata: plan, status, renewal/cancellation state, and payment events.
• Service usage data: feature usage, logs, timestamps, performance and diagnostics information.
• Flight operations data: flight plans, route information, airport identifiers, map/position context, and in-flight telemetry shown in the product.
• Integration data from connected services you authorize, such as Navigraph, IVAO, SimBrief, and other aviation ecosystem providers.
• AI and speech inputs/outputs when using AI agent or ATC transcription features, including generated responses and related technical metadata.

• Provide and operate product functionality and linked aviation services.
• Authenticate users and maintain secure sessions.
• Process subscriptions, renewals, cancellations, and payment confirmations.
• Improve reliability, performance, and user experience.
• Deliver support, service announcements, and account notices.
• Detect abuse, fraud, unauthorized access, and policy violations.
• Comply with legal obligations and enforce our Terms of Use.

Depending on your jurisdiction, we process personal data based on one or more legal bases, including contract performance, legitimate interests, compliance with legal obligations, and consent (for specific optional processing).

Our services may rely on third-party providers and integrations, including payment processors, authentication technologies, cloud infrastructure, mapping/telemetry services, and aviation data networks such as Navigraph, IVAO, and SimBrief. Their privacy practices are governed by their own policies and terms.

We do not sell personal data. We may share limited data with:

• Service providers acting on our instructions.
• Integrated partners you explicitly connect to your account.
• Authorities when required by law, court order, or valid legal process.
• Successors in connection with merger, acquisition, or asset transfer.

We retain data for as long as needed to provide services, fulfill contractual and legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data category and jurisdictional requirements.

We implement reasonable technical and organizational safeguards to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your information may be processed in countries other than your own. Where required, we apply appropriate safeguards for cross-border data transfers.

Depending on local law, you may have rights to:

• Access, correct, or delete personal data.
• Object to or restrict certain processing.
• Withdraw consent where processing depends on consent.
• Request portability of eligible data.

To submit a privacy request, contact us at [email protected]. We may need to verify your identity before processing requests.

Our services are not directed to children under the age required by applicable law to provide consent. If you believe a child provided personal data without authorization, contact us to request deletion.

We may update this Privacy Policy from time to time. Material changes will be notified through the service or by other appropriate means. Continued use after updates means you accept the revised policy.

For privacy questions, requests, or complaints, contact: [email protected]