Privacy Policy
Effective Date: October 26, 2025
Version: 2.0 - Security Update
1. Introduction
This Privacy Policy describes how Overvio System ("we," "our," or "us") collects, uses, and protects your personal information when you use our services. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.
2. Information We Collect
2.1 Personal Data
- User Identification: User IDs, session identifiers, merchant IDs, encrypted client identifiers
- Behavioral Data: Page views, cart activity, session duration, interaction patterns, ML-based user segments
- Technical Data: IP addresses, browser information, device identifiers, cookies, user agent strings
- Transaction Data: Order history, coupon usage, cart contents, purchase behavior, recommendation responses
- Security Data: Authentication attempts, threat detection scores, security incident data, access logs
3. How We Use Your Information
- Service Delivery: Provide personalized coupons, recommendations, and e-commerce optimization
- Analytics: Analyze user behavior to improve our machine learning algorithms
- Security: Detect and prevent fraudulent activities, abuse, and security threats
- System Optimization: Monitor and improve system performance and reliability
- Compliance: Meet legal and regulatory requirements
4. Data Security
We implement enterprise-grade security measures including:
- Field-Level Encryption: AES-256-GCM encryption for sensitive data fields
- Transport Security: TLS 1.3 for all data transmission
- Real-Time Threat Detection: AI-powered detection of suspicious patterns
- Access Control: Role-based access control with session management
5. Your Rights
You have the following rights regarding your personal data:
- Access: Request access to your personal information
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data
- Portability: Request a copy of your data in machine-readable format
- Objection: Object to processing of your personal data