This policy explains how OVERDRACHT SOFTWARE INC. collects, uses and protects personal data relating to the overdracht.io website and the Overdracht platform (the "Service").
OVERDRACHT SOFTWARE INC. is a company incorporated in British Columbia (Canada) under number BC1598323, with its registered office at 7404 King George Boulevard, Suite 200, Surrey, BC V3W 1N6, Canada ("Overdracht", "we").
It is addressed to:
It supplements the General Terms and Conditions of Sale (the "Terms") and the Data Processing Agreement (DPA, Appendix 1 to the Terms). It complies with Regulation (EU) 2016/679 ("GDPR"), the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec, Law 25.
Overdracht is the controller of the data of its prospects, clients and users, and the processor of the data that agencies enter about their own customers.
| Data | Overdracht's role | Applicable text |
|---|---|---|
| Website visitors, prospects, demo requests | Controller | This policy |
| Client agencies and their users (account, invoicing, support) | Controller | This policy |
| End customers of agencies (senders, recipients) entered in the platform | Processor | DPA (Appendix 1 to the Terms) |
If you are the sender or recipient of a parcel, the forwarding agency you deal with is responsible for your data. To exercise your rights, please contact it first. If you write to us directly, we forward your request to the agency within 5 business days.
We collect only the data useful for the business relationship and the operation of the Service.
| Individuals | Data | Source |
|---|---|---|
| Prospects | Name, position, company, business email and phone, content of messages, demo appointments | Contact form, appointment booking, email, public business directories |
| Clients (agencies) | Company name, contact details, tax or VAT identification number, account administrator, subscription, invoices, notification credit balance | Registration and use of the Service |
| Platform users | Name, business email, role, login details (hashed password), two-factor authentication data, connection and activity logs | Account creation by the agency, use of the Service |
| Payment | Amount, date, status, last 4 digits and type of card | Stripe |
| Support | Content of requests and exchanges | Email to support@overdracht.io |
| Website visitors | IP address, browser, pages viewed | Browsing (see Article 9) |
Full credit card numbers are processed by Stripe and are never stored by Overdracht.
We do not collect any sensitive data (health, opinions, origin, etc.). The Service is reserved for professionals and is not intended for minors.
Each processing operation is based on a legal basis provided for by the GDPR; in Canada, it is based on your consent, express or implied depending on the context.
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage the account, provide the Service and the free trial | Performance of the contract |
| Invoice the subscription and credits, collect payments | Performance of the contract; legal obligation (accounting, tax) |
| Send service emails (renewal reminder, payment failure, maintenance, changes to the Terms or prices) | Performance of the contract |
| Respond to support and contact requests | Performance of the contract or pre-contractual measures |
| Organize demonstrations | Pre-contractual measures |
| B2B marketing by email (offers, promotions) | Legitimate interest; consent where required by the law of the country (in particular CASL in Canada) |
| Secure the Service, log connections, prevent fraud | Legitimate interest |
| Improve the Service using aggregated usage statistics | Legitimate interest |
| Assert our rights in the event of a dispute | Legitimate interest |
Each marketing email contains an unsubscribe link. You can also object at any time by writing to joeltemdie@overdracht.io.
We do not sell your data and do not make any fully automated decision producing legal effects concerning you.
Your data is accessible only to the Overdracht team and our service providers, to the extent necessary for them.
| Provider | Service | Location |
|---|---|---|
| OVHcloud | Hosting of the platform and documents | France (EU) |
| Brevo | Sending of emails and SMS | France (EU) |
| Stripe | Credit card payments | United States / EU |
| Calendly | Booking of demo appointments | United States |
The platform's development and maintenance providers may access data for the purposes of their assignment, under a confidentiality undertaking.
We may also disclose data to a public authority where required by law. For data processed on behalf of agencies, we inform the agency concerned, unless prohibited by law.
Any addition or replacement of a sub-processor handling agencies' data is announced to clients at least 30 days in advance, in accordance with the DPA.
The platform's data is hosted in France, but some of it is accessed from Canada or transmitted to the United States. These transfers are governed as follows:
You can obtain a copy of the applicable safeguards by writing to joeltemdie@overdracht.io.
We keep data for the term of the subscription, then for 3 months at most, unless a longer legal obligation applies.
| Data | Period |
|---|---|
| Client account and data entered in the platform | Term of the subscription + 3 months (read-only export), then deletion |
| Free trial not converted | 3 months after the end of the trial, then deletion |
| Backups | 3 months maximum (rotation cycle) |
| Connection and activity logs | 3 months |
| Invoices and accounting records | Period required by tax law (in Canada, 6 years after the end of the fiscal year concerned) |
| Prospects without a contract | 3 years after their last contact |
| Support requests | Term of the subscription + 3 months |
| Unsubscribes (opposition list) | 3 years, to respect your choice |
An ongoing dispute may justify keeping certain data until it is finally settled.
We protect your data with appropriate technical and organizational measures, described in detail in Annex A of the DPA:
In the event of a data breach, we act without delay. For agencies' data, we notify them within 48 hours. For our own data, we notify the competent authority and the individuals concerned where required by law (GDPR, PIPEDA, Law 25).
The website and the platform use strictly necessary cookies, without consent, and other cookies only if you accept them.
| Type | Use | Consent |
|---|---|---|
| Strictly necessary | Session, authentication, security, remembering your cookie choices | Not required |
| Audience measurement | Website traffic statistics | Required |
| Advertising | Measuring the effectiveness of our online campaigns | Required |
You can accept, refuse or change your choices at any time through the banner or the "Cookie settings" link at the bottom of the page. Cookies subject to consent are kept for 13 months at most.
You can exercise your rights free of charge by writing to joeltemdie@overdracht.io; we respond within 30 days.
Depending on the law applicable to you, you have the following rights:
We may ask you to prove your identity in the event of reasonable doubt. Agencies exercise these rights themselves for their end customers from the platform (consultation, correction, export, deletion).
The person responsible for the protection of personal information at Overdracht is Joel Temdie, founder and president.
Representative in the European Union (Article 27 GDPR): Joel Temdie, 82 rue de Groussay, 78120 Rambouillet, France - joeltemdie@overdracht.io. You may contact this representative with any question about the processing of your data, as may supervisory authorities.
If you believe, after contacting us, that your rights are not being respected, you may refer the matter to the competent authority:
| You are located in | Authority |
|---|---|
| France | CNIL (cnil.fr) |
| Another EU country | Data protection authority of your country |
| Canada | Office of the Privacy Commissioner of Canada (priv.gc.ca) |
| British Columbia | Office of the Information and Privacy Commissioner for BC (oipc.bc.ca) |
| Quebec | Commission d'accès à l'information (cai.gouv.qc.ca) |
We may update this policy; the date of the last update appears at the top of the document.
In the event of a significant change, clients are notified by email at least 30 days before it takes effect. In the event of translation, the French version prevails.