Privacy Policy

Overcharge.ai ("Overcharge," "we," "us," or "our") operates the Overcharge.ai platform, an AI-powered freight audit and recovery service for businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.overcharge.ai or use our platform (collectively, the "Service").

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, company name, job title, and phone number. If you sign up using Google OAuth, we receive your name and email address from Google. We do not receive or store your Google password.

1.2 Freight Invoice and Shipment Data

To provide our freight audit service, you upload carrier freight invoices and related shipment data to the platform. This may include carrier names, invoice amounts, shipment origins and destinations, freight classifications, weight and dimensions, accessorial charges, fuel surcharges, tracking numbers, and other billing details. We process this data solely to perform the audit service on your behalf.

1.3 Payment Information

We use Stripe to process payments. When you subscribe to a paid plan, your payment card details are collected and processed directly by Stripe. We do not store your full credit card number on our servers. We receive and retain only a truncated card number (last four digits), card brand, expiration date, and billing address for record-keeping purposes.

1.4 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, actions taken (such as invoices uploaded and disputes filed), timestamps, browser type, operating system, IP address, and referring URLs.

1.5 Cookies and Similar Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and collect usage analytics. See Section 7 for more details.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: Processing your freight invoices through our AI-powered audit engine, identifying billing errors and overcharges, generating audit reports, and facilitating carrier dispute workflows.
• AI Processing: Your invoice data is analyzed by our AI models, including models provided by Anthropic, to extract line items, compare charges against contracted rates, detect anomalies, and classify error types. This processing is performed solely to deliver the audit service to you.
• Account Management: Creating and managing your account, authenticating your identity, and providing customer support.
• Analytics and Improvement: Understanding how users interact with the Service to improve features, performance, and user experience. We may use aggregated, de-identified data to develop and improve our AI models and audit algorithms.
• Communications: Sending you transactional emails (such as account confirmations, audit completion notifications, and billing receipts), as well as product updates and marketing communications where permitted. You may opt out of marketing emails at any time.
• Legal Compliance: Complying with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. Data Sharing and Third-Party Services

We do not sell your personal information or freight data. We share your information only in the following circumstances:

3.1 Service Providers

We use trusted third-party service providers to operate the Service. These providers are contractually obligated to use your data only as necessary to provide services to us and are bound by confidentiality obligations. Our key service providers include:

• Stripe — Payment processing and subscription management.
• Google — OAuth authentication and Google Analytics for usage analytics.
• Anthropic — AI model provider used for invoice data extraction and freight audit analysis. Invoice data sent to Anthropic is processed in accordance with our data processing agreement with them and is not used to train their models.

3.2 Legal Requirements

We may disclose your information if required to do so by law, or in the good-faith belief that such action is necessary to comply with applicable laws, respond to a court order, judicial or other government subpoena, or warrant.

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website of any change in ownership or uses of your information.

4. Data Security

We take the security of your data seriously and implement industry-standard measures to protect it, including:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
• Encryption at Rest: All stored data, including freight invoices and account information, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to customer data is restricted to authorized personnel on a need-to-know basis. We enforce multi-factor authentication and role-based access controls for our internal systems.
• Infrastructure: Our Service is hosted on secure cloud infrastructure with continuous monitoring, intrusion detection, and regular security assessments.

While we strive to protect your data, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

5. Data Retention and Deletion

We retain your account information and freight data for as long as your account is active or as needed to provide the Service. Specific retention practices include:

• Active Accounts: Invoice data, audit results, and account information are retained for the duration of your subscription.
• Cancelled Accounts: Upon account cancellation, we retain your data for 90 days to allow for reactivation or data export. After 90 days, your freight invoice data and audit results are permanently deleted from our systems.
• Legal Obligations: We may retain certain information for longer periods where required by law, such as billing records for tax and accounting purposes.

You may request deletion of your data at any time by contacting us at privacy@overcharge.ai. We will process deletion requests within 30 days, subject to any legal retention obligations.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Data Portability: You may request an export of your data in a commonly used, machine-readable format. We provide data export functionality within the platform for freight invoice data and audit results.
• Objection: You may object to the processing of your personal information for direct marketing purposes.
• Restriction: You may request that we restrict the processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us at privacy@overcharge.ai. We will respond to your request within 30 days.

7. Cookies and Tracking

We use the following types of cookies and tracking technologies:

• Essential Cookies: Required for the Service to function, including session authentication and security tokens. These cannot be disabled.
• Analytics Cookies: We use Google Analytics to collect aggregated usage data such as page views, session duration, and feature engagement. Google Analytics uses cookies to identify unique visitors without personally identifying them. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

We do not use advertising cookies or third-party tracking for advertising purposes.

8. International Data Transfers

Our Service is hosted in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using the Service, you consent to the transfer of your information to the United States. We take appropriate safeguards to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

9. Children's Privacy

The Service is designed for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at privacy@overcharge.ai and we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: