Privacy Policy

Last updated: March 2026

What data Overly collects — summary

  • ✦ Email address — to create and authenticate your account.
  • ✦ Authentication token — stored locally in the extension to keep you signed in.
  • ✦ Workflow recording data — page URLs, clicked elements and their DOM context, text typed into form fields, and screenshots of the active tab. This is collected only when you explicitly start a recording.

Your consent: Recording begins only when you click the Record button. The extension collects no data passively. You can stop recording at any time and delete any workflow from your dashboard.

Your data is never sold to third parties or used for advertising. It is used solely to provide the Overly workflow recording and replay service.

1. Overview

Overly ("we", "our", or "us") provides a Chrome extension and web platform that lets users record browser workflows and replay them as interactive step-by-step guides. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

By installing the Overly Chrome extension or using the Overly web platform, you agree to the practices described in this policy. If you do not agree, please uninstall the extension and do not use the service.

2. Data We Collect

Account information

When you create an Overly account, we collect your email address and a hashed password (managed by Supabase Auth). We use this to authenticate you and associate your recorded workflows with your account.

Authentication tokens

To keep you signed in, the extension stores a session token in chrome.storage.local. No plaintext passwords are ever stored by the extension.

Recorded workflow data

Recording is always opt-in. Data is collected only after you explicitly click the Record button in the Overly extension popup. You can stop recording at any time by clicking Stop. Nothing is collected when recording is not active.

While a recording session is active, the extension captures:

  • The URL and title of pages you visit
  • Elements you click and their DOM context (used to locate the element during replay)
  • Text you type into form fields (saved as part of the workflow step)
  • Screenshots of the active tab at each recorded step

This data is uploaded to your Overly account so you can replay and share workflows. You can delete any workflow and its associated data from the Overly dashboard at any time.

Usage data

We may collect basic, anonymous usage metrics (e.g. number of workflows recorded, playbacks initiated) to improve the product. This data is not linked to your identity and contains no personal content.

3. How We Use Your Data

  • To authenticate you and maintain your account
  • To store and retrieve your recorded workflows
  • To enable walkthrough replay of your workflows in the browser
  • To improve and debug the Overly extension and web platform

We do not use your data to build advertising profiles, sell it to third parties, or use it for any purpose unrelated to providing the Overly service.

4. Data Storage and Security

Workflow data, screenshots, and account information are stored securely using Supabase, which provides encrypted storage and access controls. Data is stored in the United States. We use row-level security to ensure you can only access your own workflows.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

  • Service providers: Supabase (database and storage infrastructure). These providers process data only as necessary to provide their services to us.
  • Legal requirements: If required by law or to protect the rights and safety of our users.

6. Data Retention

Your workflows and account data are retained for as long as your account is active. You may delete individual workflows at any time from the Overly dashboard. To delete your account and all associated data, contact us at the email below.

7. Your Rights

You have the right to:

  • Access the data we hold about you
  • Request correction or deletion of your data
  • Export your workflow data
  • Withdraw consent and delete your account at any time

To exercise any of these rights, contact us at the email address below.

8. User Controls and Consent

You are in full control of when data is collected:

  • Recording is always manually initiated. The extension never records passively. You must click Record to start and Stop to end each session.
  • Delete workflows at any time. Any recorded workflow and its screenshots can be permanently deleted from the Overly dashboard.
  • Sign out. Signing out of Overly removes the session token from the extension immediately. No further data can be uploaded until you sign back in.
  • Uninstall. Uninstalling the extension removes all locally stored data (session token, recording state) from your device.
  • Account deletion. You may request full deletion of your account and all associated workflows by emailing us at [email protected]. We will process requests within 30 days.

10. Children's Privacy

Overly is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of Overly after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at:

[email protected]