Privacy Policy

Overra, LLC ("Overra," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website (the "Website"), contact us, or use our drone imaging and related services (the "Services"). Our Services are offered primarily in Texas, including the Dallas–Fort Worth Metroplex and surrounding areas.

By using the Website or Services, you agree to this Privacy Policy. If you do not agree, do not use the Website or Services.

2. Definitions

• Personal Data / Personal Information: Information that is linked or reasonably linkable to an identified or identifiable individual.
• Sensitive Data: Includes precise geolocation data and other categories treated as sensitive under applicable law.
• Processing: Any operation performed on Personal Data (e.g., collecting, storing, using, disclosing, deleting).

3. Information We Collect

We may collect the following categories of information:

A. Information You Provide

• Contact and account information: name, email, phone number, company name (if applicable), and communications you send us.
• Scheduling and service coordination: property address, access instructions (e.g., gate codes), points of contact, and project requirements.
• Billing/invoicing information: billing name and address, invoice details, payment status, and records of transactions.

B. Payment Information (Processed by Stripe)

If you pay online, payments are processed by Stripe. Overra generally receives confirmation of payment and limited transaction/billing details. Stripe may collect and process payment method and transaction data, and related device/activity data, to facilitate payment processing, authentication, and fraud prevention.

C. Drone, Deliverable, and Operational Data

• Deliverables: photos, videos, maps, models, and other outputs created for your project.
• Metadata: deliverables may include metadata (e.g., time, location, technical capture details).
• Flight telemetry and logs: operational records (which may include precise geolocation) retained for safety, quality assurance, documentation, and compliance-related purposes. These data are only collected for technical mission accuracy and safety compliance.

D. Website and Technical Data

• IP address, device identifiers, browser type, operating system, referring pages, pages viewed, and interaction data.
• Cookies and similar technologies (see Section 8).

4. How We Use Information

We use information to:

• Provide, schedule, coordinate, and perform the Services, and deliver requested outputs.
• Communicate with you (service updates, quotes, invoices, support).
• Process payments and manage billing and collections.
• Operate, secure, maintain, and improve the Website and Services.
• Maintain business records (accounting, tax, insurance, operational documentation).
• Prevent fraud, misuse, unauthorized access, and other security incidents.
• Comply with legal obligations and respond to lawful requests.

5. How We Disclose Information

We do not sell your Personal Data. We do not sell, rent, or trade Personal Data for money.

No Sale of Sensitive Data: Overra never sells sensitive personal data, including precise geolocation data or Personal Identifiable Information (PII).

We may disclose information in the following situations:

A. Service Providers (Processors)

We use third parties to help operate our business. These providers may process information on our behalf under contractual or other obligations appropriate to the service provided. Examples include:

• Cloudflare (website hosting, CDN, DNS, and security services)
• Stripe (payment processing and fraud prevention)
• Google Workspace (business email and document/workflow tools)
• Google Voice (business telephone and communications services)
• Cloud storage, invoicing, CRM, or editing tools we may use from time to time

B. Payment Processor (Stripe)

We share information necessary to process payments (e.g., name, contact information, billing information, and transaction details) with Stripe. Stripe processes information under its own privacy and security practices and may use certain data to provide payment services, comply with legal requirements, and prevent fraud.

C. Financial Institutions

Overra maintains business banking relationships (currently including American Express Business Checking and Mercury Business Checking). These institutions may process transaction records and related data as part of providing banking services to Overra under their own policies and legal obligations.

D. Subcontractors / Operational Support

If required to complete your project (e.g., editing support, an additional operator/visual observer), we may share limited information necessary to perform the Services. We will limit sharing to what is reasonably needed.

E. Legal, Safety, and Enforcement

We may disclose information to comply with law, court orders, subpoenas, or lawful government requests; to protect rights, safety, and property; to investigate fraud or security issues; and to enforce agreements.

F. Business Transfers

If Overra is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.

6. Drone Operations and Privacy Commitments

Overra provides drone services for legitimate customer-requested and business purposes (e.g., marketing media, commercial properties, construction progress, inspections).

Strict Non-Surveillance Profile: In accordance with Texas Government Code Chapter 423, Overra conducts missions exclusively for authorized commercial purposes. We do not intentionally capture, process, or retain images of individuals or private property with the intent to conduct surveillance. Any incidental capture of non-participants is handled under our redaction and destruction protocols.

If you want Overra to use your deliverables (or excerpts) for public marketing (e.g., our portfolio), we will obtain your permission (for example, via a written release or in the service agreement).

7. Texas Privacy Rights

Texas residents may have rights regarding their Personal Data under the Texas Data Privacy and Security Act (TDPSA), including the right to:

• Confirm whether we process your Personal Data and access it
• Correct inaccuracies
• Delete Personal Data (subject to certain legal/operational exceptions)
• Obtain a copy of certain data (data portability), where applicable
• Opt out of certain processing where applicable (e.g., targeted advertising, sale of Personal Data, and certain profiling)

How to submit a request: Email andrew@overra.io with the subject line "Texas Privacy Request" and describe your request. We may need to verify your identity before fulfilling the request. We generally respond within 45 days, with an extension when reasonably necessary as permitted by law.

Appeals: If we deny your request, you may appeal by emailing andrew@overra.io with the subject line "Privacy Appeal." We will respond within the time required by law.

8. Cookies, Analytics, and Similar Technologies

• Cloudflare cookies and site functionality: Cloudflare uses cookies and similar technologies to help sites function, maintain security, and provide performance optimization. You may be able to control certain cookies through browser settings.
• Stripe-related cookies and fraud controls: During checkout or payment authentication flows, Stripe may use cookies or similar technologies for payment security, device identification, authentication (including 3D Secure where applicable), and fraud prevention.
• Do Not Track / Global Privacy Controls: Some browsers and extensions provide preference signals. Where required and applicable, we will honor legally recognized opt-out signals for covered processing activities.

9. Data Retention

We retain information as long as reasonably necessary for the purposes described in this Policy, including providing Services, maintaining business records, enforcing agreements, resolving disputes, complying with law, and supporting quality assurance. Retention periods may vary based on the data type (e.g., invoices vs. raw imagery vs. flight logs) and legal/insurance requirements.

If Overra determines that an image was captured in violation of Texas Government Code §423, we will immediately destroy such data without disclosing or distributing it, as permitted under the statutory defense to prosecution provided in §423.003(c).

10. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect information. However, no method of transmission or storage is completely secure. If a security incident requires notification under applicable law, we will provide notice as required.

11. Children's Privacy

The Website and Services are not intended for children under 13. We do not knowingly collect Personal Data from children under 13.

12. Third-Party Links and Embedded Content

The Website may include links to third-party sites or embedded content (e.g., maps, videos). Their privacy practices are governed by their own policies, not this Privacy Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The Last Updated date above indicates when it was last revised. Material changes will be posted on this page.

14. Contact Information