Privacy Policy

1. Overview

Caelvyn operates Overmind. This Privacy Policy explains what data we collect, how we use it, and how we protect it. We collect the minimum data necessary to operate the Service.

2. Data We Collect

Landing Page (Pre-Launch):

• Name and email address submitted via Waitlist, Founding Member, or Beta signup
• Registration tier selected
• Payment transaction ID and status — no card details; payments processed externally by PayPal or Razorpay
• For Beta applicants: screening responses, NDA acceptance text and timestamp, screening status, beta_submitted_at, and beta_access_granted_at

Overmind Product:

• Account information via Google or Apple Sign-In (name, email, profile identifier)
• Content entered into Raw Dump, Crucible, and Void — ephemeral, deleted on a rolling schedule as described below
• Anonymous session-level behavioural data: interaction patterns used internally to improve the system; never tied to your identity in any external report or shared with third parties

3. Data We Do Not Collect

• Payment card details (handled entirely by PayPal and Razorpay)
• Government identification
• Location data
• Device tracking beyond standard server logs
• Any data sold or shared with advertisers — ever

4. How We Use Your Data

• To operate and deliver the Service
• To send transactional emails via Resend (confirmation, receipt, launch notification)
• To verify payment status and manage access tiers
• To contact you about material changes to the Service
• To improve the product through anonymised usage patterns

5. Data Retention

Landing Page data: Retained until Overmind launches, at which point records are migrated to the production system. Closed Beta account data is permanently wiped at public launch as stated in the Beta Tester Policy.

Product content (Raw Dump, Crucible, Void): Ephemeral by design. Void items permanently deleted at 72-hour expiry. Crucible items reset on a rolling 7-day schedule. Once deleted, this data cannot be recovered by any means.

Behavioural metadata: Retained while your account is active. Permanently deleted after 30 days of inactivity.

Account data: Retained for the duration of your active account. Deleted within 30 days of an account deletion request.

6. Third-Party Services

Overmind uses the following third-party services:

• Supabase — database and authentication
• PayPal — global payment processing
• Razorpay — domestic payment processing
• Resend — transactional email delivery
• Cloudflare — hosting and infrastructure

Caelvyn shares only the minimum data required for each service to function. Each operates under its own privacy policy.

7. Security

We implement reasonable technical and organisational measures to protect your data. Data is encrypted in transit and at rest. No system is completely secure. You use the Service at your own risk.

8. Your Rights

You have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to retention requirements)
• Withdraw consent to communications at any time

To exercise any of these rights: support@caelvyn.com

9. Children's Privacy

Overmind is not directed at anyone under 18. We do not knowingly collect data from anyone under 18. If you believe we have collected data from a minor, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy. Continued use of the Service after changes are posted constitutes acceptance. Material changes will be communicated via email where possible.

11. Contact

For privacy-related questions: support@caelvyn.com