Privacy Policy

Effective Date: July 20, 2026

Introduction and organizational info

We, at Overtime, are dedicated to serving our customers and contacts to the best of our abilities. Part of our commitment involves the responsible management of personal information collected through our website overtime.ai, and any related interactions. Our primary goals in processing this information include:

Enhancing the user experience on our platform by understanding customer needs and preferences.
Providing timely support and responding to inquiries or service requests.
Improving our products and services to meet the evolving demands of our users.
Conducting necessary business operations, such as billing and account management.

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to all relevant regulations and guidelines to ensure that the data we handle is protected against unauthorized access, disclosure, alteration, and destruction. Our practices are designed to safeguard the confidentiality and integrity of your personal information, while enabling us to deliver the services you trust us with.

Your privacy is our priority. We are committed to processing your personal information transparently and with your safety in mind. This commitment extends to our collaboration with third-party services that may process personal information on our behalf.

Scope and application

This Policy applies to information we collect:

On our website.
In e-mail, text and other electronic messages between you and our website.
It does not apply to information collected by or through:
- Any other means including on any other website operated by any third party; or
- Any third party, including through any application or content that may link to or be accessible from, or on, our website.

Our privacy policy is designed to protect the personal information of all our stakeholders, including website visitors, registered users, and customers. Whether you are just browsing our website overtime.ai, using our services as a registered user, or engaging with us as a valued customer, we ensure that your personal data is processed with the highest standards of privacy and security. This policy outlines our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, you should not use our website. By accessing or using our website, you agree to this Policy. This Policy may change from time to time (see Changes to our Privacy Policy section below). Your continued use of our website after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of our website, including information:

by which you may be personally identified, including your name, e-mail address, or telephone number (“personal information”).
that is about you but individually does not identify you; and/or
about your internet connection, the equipment you use to access our website and usage details.

We collect this information:

Directly from you when you provide it to us.
Automatically as you navigate through the website. Information collected automatically may include usage details, IP addresses and information collected through other tracking technologies.
From third parties we contract with to provide services on our behalf.

Transparency and Control

You have the right to control whether we share some of your personal information. Please read the following information carefully.

We will collect the IP Address for internal security and other proprietary purposes. We will do so even if you have included a Do Not Track request. We do not release this data outside of our corporate environment nor utilize this data other than for internal purposes.

We believe in transparency and providing you with control over your personal information. You will always be informed about any significant changes to our sharing practices, and where applicable, you will have the option to consent to such changes.

User rights and choices

At Overtime, we recognize and respect your rights regarding your personal information, in accordance with applicable data protection laws. We are committed to ensuring you can exercise your rights effectively. Below is an overview of your rights and how you can exercise them:

Exercising your rights

To exercise any of these rights, please contact us at sales@overtime.ai. We will respond to your request in accordance with applicable data protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your identity as part of the process to ensure the security of your personal information.

We are committed to facilitating the exercise of your rights and to ensuring you have full control over your personal information. If you have any questions or concerns about how your personal information is handled, please do not hesitate to get in touch with us.

Requesting Access or Changes to Your Information

You can make changes to personally identifiable information we collect from you by one of the following methods;

Calling us at: 888-802-6299
Emailing us at: info@overtime.ai

Usage Details, IP Addresses, Cookies and Other Technologies

As you navigate through and interact with our website, we may automatically collect certain information about your equipment, browsing actions and patterns, including:

Information about your computer and internet connection, including your IP address, operating system and browser type.

The information we collect automatically is statistical data and does not identify any individual.

There may be features that are developed in the future that may result in the collection of additional new information.

We do not allow third parties to collect personally identifiable information about a user’s online activities, over time and across different sites, services, and applications, when that user uses our site or service.

How we use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

To present our website and its contents to you.
To provide you with information or services that you request from us.
To offer and fulfill our core business purposes.
To fulfill any other purpose for which you provide it.
To carry out our obligations and enforce our rights arising from any contracts entered between you and us or a previous owner of an applicable account, including for billing and collection.
To notify you about changes to our website or any products or services we offer or provide though it.
To allow you to participate in interactive features on our website.
In any other way we may describe when you provide the information.
For any other purpose with your consent.

Disclosure Of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect, or you provide as described in this Policy:

To contractors, service providers, and other third parties we use to support our business, such as insurers, information source, payment processing, and accounts receivable service providers, who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent.

We may also disclose your personal information:

To comply with any court order, law or legal process, including to respond to any government or regulatory request.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Overtime or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction. Overtime has implemented physical, electronic, and procedural security safeguards to protect against the unauthorized or unlawful release of or access to personal information, including any social security numbers. To further safeguard information such as social security numbers, access such data is limited, and our employees must abide by standards of conduct and confidentiality agreements.

Your choices and consent

Upon your first visit, our website will present you with a cookie consent banner, where you can:

Accept all cookies: Consent to the use of all cookies and tracking technologies.
Reject non-essential cookies: Only essential cookies will be used to provide you with necessary website functions.
Customize your preferences: Choose which categories of cookies you wish to allow.

Direct marketing and Communications

At Overtime, we may use your personal information to send you direct marketing communications about our products, services, promotions, and other relevant information that we believe may be of interest to you. We are committed to ensuring that our direct marketing practices are transparent, lawful, and in compliance with applicable data protection laws.

Types of direct marketing communications

We may use your personal information to send you direct marketing communications via various channels, including:

Telephone Calls
Email

Every direct marketing email we send will include clear instructions on how to unsubscribe or opt-out from receiving future marketing communications. You can exercise your right to opt-out at any time, and we will promptly honor your request to stop sending you marketing messages.

Managing your Direct Marketing Preferences

You have control over the direct marketing communications you receive from us. You can manage your communication preferences by using the unsubscribe link provided in our marketing emails or text messages.

Changes To Our Privacy Policy

Overtime may change, add, modify or remove portions of this Policy at any time, which shall become effective immediately upon posting on this page. The date the Policy was last revised is identified at the bottom of the page. It is your responsibility to review this Policy for any changes. By continuing to use our website, you agree to any changes in the Policy.

Contact Information

If you have any questions about Overtimes’ privacy protection practices or believe we have not adhered to this Policy, please contact us at
Telephone: 888-802-6299
Email: info@overtime.ai

CALIFORNIA RESIDENTS: PRIVACY POLICY NOTICE

This Privacy Policy Notice is intended for California residents pursuant to the California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2020 (collectively “CCPA”), and supplements the information contained in the above Privacy Policy. Any terms defined in the CCPA, and applicable California regulations have the same meaning as used in this Privacy Policy Notice. If you have a disability and want this Privacy Policy Notice provided in an alternative format, please call us at 866-335-3361 or write us at 79 Warren St, Suite 3, Glens Falls NY 12801. If you have questions about our Privacy Policy or practices, please call 866-335-3361

Information We Collect About You

We may collect and use personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be directly or indirectly linked, with a consumer, device, or household (“personal information”).

Personal Information does not include:

Publicly available information from government records.
Deidentified or aggregated consumer information.
Information excluded from the CCPA’s scope, such as (but not limited to) information governed by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the California Confidentiality of Medical Information Act (“CMIA”), the Fair Credit Reporting Act (“FCRA”), the Gramm-Leach-Bliley Act (“GLBA”), California Financial Information Privacy Act (“FIPA”), and the Driver’s Privacy Protection Act of 1994 (“DPPA”).

We regularly collect (and have collected in the past 12 months) several types of personal information about individuals, including:

Category	Examples
Identifiers	Name, postal address, Internet Protocol address, email address, account number, Social Security number, or other similar identifiers
Categories listed in the California Customer Records statute, Cal. Civ. Code § 1798.80(e)	Name, signature, Social Security number, address, telephone number, employment, medical information, or insurance information
Protected classifications under California or federal law	Age, gender, medical condition, disability, veteran or military status
Commercial information	Records of products or services purchased, obtained
Internet or other similar network activity	Information on a consumer’s interaction with our website(s), application(s) or form(s)
Audio, electronic, visual or similar data	Call recordings, and transcripts of AI virtual agents
Professional or employment-related information	Current or past job history
Inferences drawn from personal information	To create a profile reflecting the consumer’s preferences, characteristics, aptitudes, or behavior
Sensitive personal information	A consumer’s social security number, medical information

How Your Personal Information is Collected

We collect most of this personal information from sellers of accounts receivable or from you or your authorized representative by telephone or written communications. However, we may also collect information:

From publicly accessible sources (e.g., property records or court records).
From our service providers (e.g., call analytics, skip-tracing, payment processing, collections, and other vendors)

Why We Use or Disclose Your Personal Information

We regularly use or disclose personal information for one or more of the following business purposes:

Fulfill the reason you provided the information.
Perform services on behalf of a business or service provider, including maintaining or servicing accounts, providing customer service, processing transactions, verifying customer information, providing analytic services, or providing similar services on behalf of the business or service provider.
Provide you with information or services that you request from us
Auditing related to consumer interactions
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
Debugging to identify and repair errors that impair existing intended functionality
Short-term, transient use, where the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction
Undertaking activities to verify or maintain the quality of a service or device that is owned, made by or for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, made by or for, or controlled by us
Respond to law enforcement requests and as required by applicable law or court order
As appropriate to protect the rights, property, or safety of us, our clients, or others
As described to you when collecting your personal information or as otherwise set forth in the CCPA.

We will not collect additional categories of personal information or use the personal information we collected for materially different purposes without providing you notice.

We regularly disclose (and have disclosed in the past 12 months) the above listed categories of personal information for business purposes to one or more of the following categories of third parties: our service providers (payment processing, mailing, collection, call analytics and other vendors), credit reporting agencies, regulatory and law enforcement agencies.

We do not sell or share your personal information under the CCPA.

We do not use or disclose sensitive personal information for purposes other than those necessary to perform services reasonably expected by an average consumer; to help ensure security and integrity where use of the information is reasonably necessary and proportionate for this purpose; for short-term, transient use; for performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling transactions, verifying customer information, or providing similar services; for undertaking activities to verify or maintain the quality of our services, and to improve, upgrade, or enhance our services.

We retain each category of personal information or sensitive personal information no longer than is reasonably necessary for the purposes for which it was collected as stated in this privacy policy, unless extending the retention period is otherwise required or permitted by law. Subject to this limitation, the retention period of each category of personal information or sensitive personal information is determined by considering the following: the time required to retain the information to fulfill our business purposes; the time applicable to maintaining corresponding transaction and business records; the time necessary to respond to consumer queries, complaints or lawsuits; data retention requirements of applicable laws or contracts; and applicable data retention policies as may be in place from time to time.

Verifiable Consumer Requests for Information

Upon verification of identity, California residents may in some cases request that a business:

Disclose the categories of personal information the business collected about the consumer;
Disclose the categories of personal information that the business sold about the consumer;
Disclose the categories of personal information that the business disclosed about the consumer for a business purpose;
Disclose the categories of third parties with whom the business shares personal information
Disclose specific pieces of personal information the business has collected about the consumer
Disclose any financial incentives offered by the business for collection, sale, or deletion of personal information

You have a right not to receive discriminatory treatment by a business for your exercise of CCPA privacy rights. A business may charge a different price or rate or provide a different level or quality of goods or services to you, if that difference is reasonably related to the value provided to you by your personal information.

For applicable personal information access and portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Please note that we are not required to:

Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;
Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information;
Provide the requested information disclosure to you more than twice in a 12-month period.
Provide the requested information disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf; or
Provide the requested information disclosure if a CCPA or applicable exception applies.

Right to Request Deletion of Personal Information

Upon verification of identity, California residents may in some cases request that we delete personal information about you that we collected from you and retained, subject to certain exceptions.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

Complete the transaction for which the personal information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
Debug to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act.
Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
Comply with a legal obligation; or
If another CCPA or applicable exception applies.

Right to Request Correction of Inaccurate Personal Information

Upon verification of identity, California residents may in some cases request a business that maintains inaccurate personal information about you correct that inaccurate personal information. We will use commercially reasonable efforts to correct the inaccurate personal information.

California residents may submit verifiable requests for information, deletion or correction described herein by

Telephone: 888-802-6299
Email: info@overtime.ai

Verifying Your Identity If You Submit CCPA Requests

If you choose to contact us directly via the designated methods described above to exercise your CCPA rights, you will need to:

Provide enough information to reasonably identify you [(e.g., your full name, account number if applicable, and potentially other identifying information]; and
Describe your request with sufficient detail to allow us to properly process and respond to your request.

If you are seeking to make a verifiable request under the CCPA on behalf of someone else, we require enough information to reasonably identify the subject of the request (including name and other identifying information) and the subject’s written consent to make the CCPA request on his or her behalf, as consistent with applicable law.

We are not obligated to make an information disclosure or carry out a deletion request pursuant to the CCPA if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.

Any personal information we collect from you to verify your identity in connection with your CCPA request will be used solely for the purposes of verification.

Last modified: July 20, 2026

ALABAMA, COLORADO, CONNECTICUT, DELAWARE, INDIANA, IOWA, KENTUCKY, MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OKLAHOMA, OREGON, RHODE ISLAND, TENNESSEE, TEXAS, UTAH AND VIRGINIA RESIDENTS:

OVERTIME’S PRIVACY POLICY NOTICE

This Privacy Policy Notice is intended for Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia residents pursuant to the Alabama Personal Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Delaware Personal Data Privacy Act, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Kentucky Consumer Data Protection Act, the Maryland Online Data Privacy Act, the Minnesota Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, the Nebraska Data Privacy Act, the New Hampshire Consumer Data Privacy Act, the New Jersey Data Privacy Act, the Oklahoma Data Privacy Act, the Oregon Consumer Privacy Act, the Rhode Island Data Transparency and Privacy Protection Act, the Tennessee Information Protection Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act and the Virginia Consumer Data Protection Act, respectively. This policy supplements the information contained in the above Privacy Policy. Any terms defined in these laws and related regulations have the same meaning as used in this Privacy Policy Notice.

Personal Data We Collect About You

We may process personal data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be directly or indirectly linked, with a consumer, device, or household (“personal data”).

Personal data does not include:

Publicly available information from government records.
Deidentified or aggregated consumer information.
Information excluded from the scope of the above privacy laws, such as (but not limited to) information governed by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Fair Credit Reporting Act (“FCRA”), and the Gramm-Leach-Bliley Act (“GLBA”).

We regularly process (and have processed in the past 12 months) several types of personal data about individuals regarding accounts we service or purchase, including:

Category	Examples
Identifiers	Name, signature, postal address, Internet Protocol address, email address, telephone number, account number, Social Security number, or other similar identifiers
Financial information	Bank account number, credit card number, debit card number, or other financial information; medical insurance information
Protected classifications	Age, gender, medical condition, disability, veteran or military status
Commercial information	Records of products or services purchased, obtained
Internet or other similar network activity	Information on a consumer’s interaction with our website(s) or application(s)
Audio, electronic, visual or similar data	Call recordings, Transcripts of AI virtual agent calls
Professional, or employment-related information	Current or past job history
Inferences drawn from personal information	To create a profile reflecting the consumer’s preferences, characteristics, aptitudes, or behavior
Personal information	A consumer’s social security number, a consumer’s account log-in in combination with any required security or access code, password, or credentials allowing access to the account

Why We Process Your Personal Data

We regularly process personal data for one or more of the following business purposes:

Fulfill the reason you provided the information. For example, if you share your personal data to make a payment, we will use that information to process your payment.
Perform services on behalf of a business or service provider, including maintaining or servicing accounts, providing customer service, processing transactions, verifying customer information, processing payments, providing analytic services, or providing similar services on behalf of the business or service provider.
Provide you with information or services that you request from us
Auditing related to consumer interactions.
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
Debugging to identify and repair errors that impair existing intended functionality.
Short-term, transient use, where the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction.
Undertaking activities to verify or maintain the quality of a service or device that is owned, made by or for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, made by or for, or controlled by us.
Respond to law enforcement requests and as required by applicable law or court order.
As appropriate to protect the rights, property, or safety of us, our clients, or others.
As described to you when collecting your personal information or as otherwise permitted by law.

We will not collect additional categories of personal data or use the personal data we collected for materially different purposes without providing you notice.

Third Parties To Whom We Disclose Personal Data

We regularly disclose (and have disclosed in the past 12 months) the above listed categories of personal data for business purposes to one or more of the following categories of third parties: our creditor clients, our service providers (payment processing, mailing, collection, call analytics and other vendors), regulatory and law enforcement agencies.

We Do Not Sell Personal Data, Engage In Targeted Advertising Or Profiling, Or Use Personal Data to Train Large Language Models

We do not sell your personal data, process your personal data for targeted advertising, or process your personal data for automated decision-making including profiling in furtherance of decisions that produce legal or similarly significant effect on you. We do not collect or use your personal data to train large language models.

How To Request To Exercise Your Rights

Upon our verification of identity through commercially reasonable means, you may request to exercise one or more of the following rights:

To confirm whether or not we are processing your personal data and to access such personal data;
To delete personal data provided by or obtained about you;
To obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another company without hindrance, where the processing is carried out by automated means.
To correct inaccuracies in your personal data

Delaware, Maryland, Minnesota and Oregon residents also have the right to obtain confirmation of the specific third parties to whom we have disclosed your personal data.

Connecticut residents also have the right to obtain confirmation of any inferences about them derived from their personal data and whether their personal data was processed for the purposes of profiling. If their personal data was processed for profiling, they have the right, if feasible, to: question the result of profiling; be informed of the reason profiling resulted in any automated decision that produced any legal or similarly significant effect; and review their personal data that was processed for the purposes of profiling.

Connecticut residents also have the right to delete publicly available information that was used to create a consumer profile made available to users of a publicly accessible website or made available for sale, or any inference generated from the profile.

You may request to exercise these rights or contact us by one of the following methods:

Calling us at 888-802-6299
Emailing us at Info@overtime.ai
Mailing us at: 2222Ponce De Leon Blvd. Suite 06-102, Coral Gables, FL 33134

You may appeal our decision concerning your request by, contacting us using any of the above methods, within 45 days of your receipt of our decision on your request, to advise of your appeal.] .

Data Retention Policy

Last modified: 7/20/26