This Data Retention & Deletion Policy explains how Overthink It retains, deletes, and manages information associated with accounts, Cases, messages, friendships, public posts, uploaded images, AI analyses, reports, and other use of the Service.
This policy should be read together with the Overthink It Terms of Service, Privacy Policy, AI Use & AI Privacy Notice, Community Guidelines, Safety & Reporting Policy, Copyright / DMCA Policy, and Age & Child Safety Policy.
Overthink It is designed for users 18 years of age and older.
Overthink It follows these general principles:
This policy applies to information that may be associated with a user's use of Overthink It, including:
The specific information collected and how it is used is described in the Overthink It Privacy Policy and AI Use & AI Privacy Notice.
While an account remains active, Overthink It may retain information necessary to provide the Service.
This may include:
Users may request deletion of their account through the available account settings or deletion process.
When a user requests permanent account deletion, Overthink It will begin the account deletion process.
The deletion process may include removal or de-identification of:
Some information may need to be retained for limited periods for reasons described below.
Deletion may not occur instantaneously across every system.
For example, information may temporarily remain in:
Overthink It will take reasonable steps to prevent deleted information from being used for ordinary Service operations during the deletion process.
Information remaining in backups will generally be removed or overwritten according to the applicable backup lifecycle.
Cases are a core feature of Overthink It and may contain highly personal information.
A Case may contain:
Users should assume that information intentionally saved to a Case may remain available until the Case or relevant content is deleted.
Overthink It may provide different Case states, including:
Active
The Case is currently being used and remains available to authorized participants.
Paused
The Case is temporarily inactive but has not been deleted.
Pausing a Case does not constitute deletion.
Closed
The Case has been closed by the user.
Closing a Case does not automatically mean that all underlying data has been permanently deleted unless the application's specific functionality states otherwise.
Users should use the available deletion controls when they want information permanently removed, subject to applicable exceptions.
Shared Cases require particular privacy protection.
When a user shares a Case with another user, the authorized participants may be able to access information contained within that Case.
If the friendship or sharing relationship ends, access to the Case should be removed according to the application's access-control rules.
Removing access does not necessarily mean that information already viewed, copied, downloaded, or independently saved by another participant can be recovered or deleted from that person's possession.
Overthink It cannot guarantee the deletion of information that another user has independently copied or retained outside the Service.
If users mutually become Friends and subsequently one user removes the other as a Friend, access to Cases dependent on that friendship may be revoked.
The same applies if a friendship is otherwise terminated.
Overthink It will use the application's authorization system to determine whether a user is still entitled to access shared Case information.
Removing a user from a Case or removing a friendship should not be treated as a substitute for deleting the Case itself.
Screenshots of conversations may contain highly personal information.
Users may upload:
Users should only upload information they have the right or permission to submit for analysis.
Overthink It will retain uploaded screenshots only for as long as reasonably necessary to provide the relevant feature, maintain the user's saved content, protect the Service, or satisfy legitimate legal and operational requirements.
Where the application provides a deletion control, users may delete uploaded images.
When a user submits information to an AI feature, Overthink It may process:
AI inputs and outputs may be retained when necessary to:
Additional information is provided in the AI Use & AI Privacy Notice.
Where supported, users should be able to delete the original uploaded image separately from the resulting analysis.
For example:
Delete uploaded image
may remove the screenshot while allowing the user to retain a text-based analysis.
Users should also have the ability to delete the associated analysis where supported.
Deleting an image does not necessarily delete information that the user independently copied into another Case, message, post, or other part of the Service.
Information may exist in more than one place within the Service.
For example, a user might:
Deleting the original screenshot does not necessarily delete the other copies.
Users should delete each copy they no longer want retained.
Messages may be retained while necessary to provide messaging functionality.
Deleting a message may:
Certain message information may remain temporarily in backups, security records, moderation systems, or other systems where necessary.
If a message has already been viewed, copied, screenshotted, forwarded, or otherwise retained by another user, Overthink It cannot guarantee that the recipient's independent copy can be deleted.
Public posts, comments, polls, and other publicly shared content may be retained while the content remains available on Overthink It.
When a user deletes public content, Overthink It will take reasonable steps to remove it from the active Service.
However, deleted public content may remain temporarily in:
Other users may also have independently copied or redistributed content.
Overthink It cannot guarantee removal of copies outside its control.
When content is deleted, Overthink It may retain limited information for legitimate purposes such as:
Retained information should not be used for unrelated purposes merely because it remains technically available.
Overthink It may retain records relating to:
This information may be retained after an account or post is deleted when reasonably necessary to:
Although Overthink It is strictly 18+, information relating to suspected child exploitation, serious threats, violence, or other serious safety matters may be preserved where legally required or reasonably necessary for investigation and reporting.
Such information may be retained longer than ordinary user content where required by applicable law or necessary for legitimate safety purposes.
Access to such information should be restricted.
If Overthink It reasonably determines that information must be preserved because of:
the affected information may be retained beyond the ordinary deletion period.
Once the legal requirement or legitimate preservation need ends, the information should be deleted or de-identified according to applicable procedures.
Overthink It may retain technical and security logs for a limited period.
These may help detect:
Security logs should be limited to information reasonably necessary for security and operational purposes.
Overthink It should not intentionally store passwords, authentication codes, or other authentication secrets in ordinary logs.
Overthink It may maintain backups for:
Deleting information from the live production environment may not immediately remove it from every backup.
Backups should be subject to defined retention and expiration processes.
When a backup reaches the end of its retention period, it should be securely deleted or overwritten according to the applicable backup process.
Overthink It may retain information that has been aggregated or de-identified so that it no longer reasonably identifies a particular user.
For example, Overthink It may retain aggregated statistics about:
Where information has been genuinely de-identified or aggregated, it may no longer be considered personal information under applicable law.
Overthink It will not claim information is anonymous merely because direct identifiers have been removed if the information can reasonably be linked back to an individual.
Friend relationships and friend requests may be retained while necessary to operate the social features of the Service.
When a friendship ends:
Historical information may remain where necessary for security, moderation, dispute resolution, or legal purposes.
Overthink It may establish procedures for accounts that remain inactive for an extended period.
If Overthink It introduces an inactivity-based deletion process, the company may provide reasonable notice before deleting an inactive account where appropriate.
Any such process will be described in an updated version of this policy or through appropriate account notices.
Where available, users may delete:
Deletion controls should be reasonably accessible through the relevant part of the Service.
A user who wants to permanently delete their account should use the account deletion functionality provided by Overthink It.
Depending on the platform's implementation, deletion may require:
These measures help prevent an unauthorized person from deleting another user's account.
Overthink It may require reasonable verification before processing certain deletion requests.
This is particularly important when a request:
Overthink It will not require unnecessary information merely to process a routine deletion request where the user's identity can already be securely established.
Deletion does not necessarily require Overthink It to erase every record immediately.
Information may be retained when reasonably necessary to:
Comply with law
Including tax, accounting, regulatory, court, or legal requirements.
Prevent fraud and abuse
Including records necessary to prevent users from repeatedly violating platform rules.
Protect security
Including security logs and records of account compromise or attacks.
Resolve disputes
Including information reasonably necessary to investigate or defend claims.
Enforce agreements
Including information necessary to enforce the Terms of Service.
Protect users
Including safety and moderation records.
Information retained for legal, security, safety, or operational reasons does not necessarily remain visible to ordinary users.
Where practical, retained information should be:
Overthink It may use third-party providers for services such as:
Those providers may process or temporarily retain information according to their services and contractual obligations.
Overthink It will seek to use providers with appropriate security and data-protection practices.
Specific categories of third parties and data sharing are described in the Privacy Policy and, where applicable, the AI Use & AI Privacy Notice.
When Overthink It sends information to an external AI provider, retention may be governed by the provider's applicable configuration and contractual terms.
Where available and appropriate, Overthink It should use privacy-preserving configurations that limit provider retention and prevent submitted user information from being used for unrelated purposes.
The specific AI providers and retention practices should be identified in the Privacy Policy or AI Use & AI Privacy Notice.
Overthink It should not represent that an AI provider has a particular retention period unless that configuration has actually been implemented.
Overthink It should collect and retain only information reasonably necessary for the purposes described in its policies.
For example, if an AI analysis can be completed without retaining the original uploaded image indefinitely, the system should provide an appropriate mechanism for deleting the image.
Similarly, unnecessary copies of sensitive conversation data should not be created simply for convenience.
Users should avoid uploading unnecessary sensitive information.
This includes:
If such information is accidentally uploaded, users should delete the relevant image or content as soon as possible.
Overthink It may also take reasonable steps to restrict or redact certain sensitive information when technically feasible.
Overthink It cannot control information that another user independently saves outside the Service.
For example, another user may:
Deleting information from Overthink It does not necessarily delete independent copies made by another person.
Users should carefully consider what information they share.
Information shared through external links or third-party services may be subject to the privacy and retention practices of those services.
Overthink It is not responsible for the retention practices of third parties that are not controlled by Overthink It.
Nothing in this policy requires Overthink It to delete information when retaining it is necessary or permitted under applicable law.
Examples may include information necessary to:
Once the applicable retention requirement ends, Overthink It will seek to delete or appropriately de-identify the information.
Depending on where a user lives, they may have legal rights concerning their personal information.
These rights may include:
The availability of these rights depends on applicable law.
Requests should be submitted through the privacy contact or mechanism identified in the Overthink It Privacy Policy.
Overthink It may take reasonable steps to verify a privacy request before providing access to or deleting information.
This helps prevent someone from:
Verification requirements should be proportionate to the sensitivity of the request.
If information is included in content shared with another user, deleting the original may not automatically remove copies held by the recipient.
For example, if a user shares a Case containing an AI analysis with a Friend, deleting the original uploaded screenshot may not delete:
Overthink It can control information stored on its own systems but cannot control independent copies outside the Service.
Overthink It may update this Data Retention & Deletion Policy as:
Material changes may be communicated through the Service or another appropriate method.
The "Last Updated" date will indicate when the policy was most recently revised.
Questions concerning data retention, deletion, or privacy rights should be directed to the privacy contact identified in the Overthink It Privacy Policy.
Users should not include unnecessary passwords, authentication codes, financial information, or other sensitive information when submitting a privacy request.
Overthink It follows these basic rules: