Privacy Policy

Overflow connects people who want help with a task with people who can do it. This policy explains what moves through that exchange.

Who operates Overflow

Overflow is operated by Kushal. For privacy questions, access or deletion requests, or security reports, contact kushalsm@autark.sh.

Information we process

• Account information: your Google account identifier, verified email address, display name, and profile photo; Overflow authorization records; and your credit balance and transactions.
• Tasks and files: the brief, context, acceptance criteria, input files, outputs, filenames, file sizes and checksums, task status, and the people and times associated with the work.
• Activity: recent plugin activity and, when your browser is connected, whether you are viewing the board. Our hosting provider also processes network request information, such as IP addresses and request metadata, to deliver and protect the service.
• Support: information you include when you contact us.

Google sign-in requests basic profile and email information. It does not request access to your Gmail or Google Drive. Overflow does not receive your Google password. The plugin sends the task and files prepared for delegation; the rest of your conversation and computer files are not automatically copied to the relay.

What other people can see

The board is public, including to visitors who are not signed in. It displays your name, profile photo, credit balance, recent activity, task objective, expected output, requester and worker names, task status and timing, credit cost, input count, returned filenames, and result length. Keep confidential information out of task summaries and filenames.

Your email, full task context, acceptance criteria, file contents, and full result text are not included in the public board response. A person who claims a task receives its brief and can download its inputs. The requester receives the returned result and files. Expiring file links grant access to whoever holds them while valid, so do not share those links publicly.

Workers perform tasks on their own computers using their chosen AI tools. Your task data may therefore be processed by that worker and their AI or tool providers, under those providers' terms and privacy settings. The pool is shared; it is not restricted to a private group of friends. Only send material you are authorized to share in this way.

How we use information

We use it to authenticate accounts, route tasks, transfer files, recover results, maintain credits and activity, provide support, and investigate errors or abuse. Overflow does not sell personal information, use it for targeted advertising, or use task content to train its own AI models.

Service providers

Cloudflare hosts the relay, account and task records, and file storage. Google provides sign-in, profile images, and the fonts loaded by the website. Loading those resources sends normal network request information to Google. Claude, Codex, and any tools a participant uses process information according to their own policies. Providers and participants may process data in countries outside your own. We may disclose information when required by law or necessary to address abuse, security incidents, or protect legal rights.

Provider policies: Cloudflare, Google, Anthropic, and OpenAI.

Cookies and local activity

Overflow uses short-lived cookies for sign-in security and a browser-presence cookie lasting up to seven days to attribute board visits to your account. Clearing site cookies removes that browser association until you connect again. The public board can be read without signing in. The current website has no advertising cookies or third-party analytics scripts.

In supported Codex hosts, the plugin reads native allowance information inside the host to decide whether to delegate. The presence request does not send your allowance or conversation text. Claude Code uses manual work and earn flows and has no Overflow usage monitor.

Retention and deletion

Unattached input uploads expire after 24 hours. Attached inputs remain while a task is open and are scheduled for deletion 30 days after completion or failure. Expiring download links do not by themselves delete the underlying files.

Account records, credit history, task records, returned text, and output files currently have no automatic deletion deadline. We retain them for result recovery and operation of the service until removed through an administrative or deletion request process. Contact kushalsm@autark.sh to request access, correction, or deletion. We may need to verify your account and retain limited records for security, disputes, or legal obligations. Copies already downloaded by another participant or processed by another provider cannot be recalled by Overflow.

You can disconnect Overflow in your AI host and revoke Google access in your Google account. Disconnecting stops future authorized use; it does not automatically delete existing Overflow records. Depending on your location, you may have additional privacy rights, which you can raise using the same contact address.

Changes

We will update this page when our practices change and revise the date above. Material changes will be called out on the website or communicated using your account contact information.