Third-Party Service Providers / Subprocessors

Overthink It uses Base44, operated through Wix, for hosting and platform infrastructure supporting the Service.

Depending on the applicable service, Base44 (Wix) may process:

• Account information.
• Technical information.
• Service-related information.
• Information necessary to operate the application and its underlying infrastructure.

Overthink It uses third-party AI providers, including Anthropic, Google, and OpenAI, to provide certain AI-powered functionality.

Depending on the feature used and the information submitted by the user, these providers may process:

• User-submitted text.
• Images.
• Screenshots.
• Conversation content.
• Profile information.
• Other information submitted for AI processing.

The specific AI provider used may vary depending on the feature, technical implementation, availability, or other operational considerations.

AI processing is also governed by the Overthink It AI Use & AI Privacy Notice.

Users should avoid submitting unnecessary sensitive information to AI features.

Overthink It uses Wix Media for storage and delivery of uploaded files and media.

This may include:

• Images.
• Screenshots.
• Profile photographs.
• Documents.
• Other files uploaded through supported features.

Base44 (Wix) supports certain transactional and service-related communications.

Information processed for these purposes may include:

• Email addresses.
• Communications metadata.
• Information necessary to deliver authorized communications.

These communications may include account-related notices, authentication messages, notifications, invitations, and other service communications.

Base44 may provide analytics and product-measurement functionality used to understand service usage, monitor performance, identify technical issues, and improve the Service.

Information processed for these purposes may include:

• Technical information.
• Usage information.
• Application events.
• Performance information.

Overthink It seeks to limit analytics information to what is reasonably necessary for the applicable purpose.

Overthink It supports multiple authentication methods.

Google may process authentication and account information when a user chooses Google sign-in.

Base44 supports authentication through email and password.

The information processed may include information necessary to authenticate the account, maintain account security, and provide access to the Service.

The information exchanged with an authentication provider may depend on the authentication method selected by the user.

Base44 (Wix) supports infrastructure and security functions that help protect Overthink It and its users.

Information processed for these purposes may include:

• Technical information.
• Account information.
• Security-related information.
• Information necessary to detect or prevent unauthorized activity.

These functions may assist with preventing account compromise, malicious activity, abuse, fraud, unauthorized access, and other security threats.

Student Money Mentors LLC may provide customer-support and operational assistance for Overthink It.

Information provided in a support request may be processed when reasonably necessary to:

• Respond to the user's request.
• Investigate a reported problem.
• Troubleshoot an account or service issue.
• Address safety or security concerns.
• Provide other authorized support.

Users should provide only information reasonably necessary to resolve their support request.

The providers identified in this policy are the providers currently used for the functions described above as of the Last Updated date.

The provider list may change as Overthink It develops.

Overthink It may:

• Add providers.
• Replace providers.
• Change providers for particular functions.
• Discontinue providers.
• Use additional providers for new features.

Where applicable law requires notice concerning material changes to subprocessors or service providers, Overthink It will provide such notice in accordance with applicable law.

Some providers may process information in jurisdictions outside the country where a user resides.

Where required by applicable law, Overthink It will use appropriate safeguards for applicable international transfers of personal information.

Additional information regarding international processing and transfers is provided in the Overthink It Privacy Policy.

Overthink It seeks to require providers processing information on its behalf to:

• Process information only for authorized purposes.
• Maintain appropriate security measures.
• Protect information against unauthorized access, disclosure, alteration, or destruction.
• Comply with applicable contractual requirements.
• Assist with applicable privacy and security obligations where required.
• Handle information appropriately when the applicable service relationship ends, subject to legal, security, backup, or other legitimate requirements.

Third-party providers may also retain information where necessary to comply with applicable law or legitimate security obligations.

Third-party providers may maintain their own terms, privacy policies, and security practices.

Overthink It does not control the independent privacy or security practices of third parties beyond the contractual and operational relationship applicable to their services.

Users should review applicable third-party policies where relevant.

Overthink It seeks to limit third-party access to user information to information reasonably necessary for the provider to perform its assigned function.

The fact that a provider is listed in this policy does not mean that the provider receives all information collected or maintained by Overthink It.

The categories of information accessible to a provider depend on the particular service, feature, technical configuration, and purpose for which the provider is engaged.

Overthink It may update this policy as:

• Service providers change.
• Platform features change.
• New technologies are introduced.
• Privacy or security practices develop.
• Legal requirements change.

The Last Updated date will be revised when appropriate.

This policy provides additional information regarding third-party service providers and subprocessors. It does not replace the Overthink It Privacy Policy or AI Use & AI Privacy Notice.

Those policies provide additional information regarding:

• Information collected by Overthink It.
• How information is used.
• How information may be disclosed.
• Data retention.
• Security practices.
• Privacy rights.
• AI processing.
• Applicable legal obligations.