Legal
Privacy Policy
CloudOverture Privacy Policy
Effective: August 25, 2026
CloudOverture is a product of Touchtone Corporation (“we”, “us”). This policy explains what information we collect, how we use it, and the choices you have.
We wrote this policy in plain words on purpose. If anything is unclear, email us at info@touchtonecorp.com and we will answer plainly.
The one-paragraph version
We collect the information you give us, whether you join our waitlist or run an account, and technical logs to keep the service working and secure. Your business records belong to you, and we use them only to run the service for you. If you connect an email account, we read it only to run the email features you turned on. We do not sell personal information. We do not use your data to train AI models. We share data only with the service providers that run CloudOverture, and we name them below.
What we collect
Waitlist and partner questions. You do not need an account to contact us. When you join the waitlist on our website, or ask about our partner program, we collect your first and last name, your business name, and your email address. You can also write us an optional note about your business. We use this to email you about early access, the launch, and the partner program. Every one of those emails has an unsubscribe link. You can also email us to be removed at any time.
Account information. When you sign up, we collect your name, business name, email address, phone number, and business address. You can add more to your profile, like a photo or job title.
Billing information. Card entry goes directly to Stripe, Inc., our payment processor. Full card numbers never reach our servers. We keep the card brand and the last four digits so you can see which card is on file. If you pay in USDC, we see the blockchain transaction, which includes the paying wallet address.
Your business records. You and your team put business data into CloudOverture: contacts, quotes, invoices, work orders, payments, notes, emails you connect, and files you upload. This data is yours. We process it only to run the service for you. Our Data Processing Addendum states those duties in contract form.
Email accounts you connect. You do not have to connect an email account, but the email features need one. You can connect your own mailbox (Gmail, Microsoft 365, or another provider over IMAP). An admin can also connect a shared company inbox, like info@yourcompany.com. After you connect a mailbox, CloudOverture checks it every few minutes. It reads new mail in the inbox and in the sent folder. For each email, we store the sender, the recipients, the date, the subject, the message text, and any attachments. We read your mail to run the email features. We file each email on the right customer record. We also suggest a next step (for example, create a contact, or follow up on a quote).
AI sorts your incoming email. After you connect a mailbox, our AI reads each new incoming email and decides where it belongs: a customer message, a vendor message, or mail that is neither (for example, spam or an auto-reply). This runs by itself. You do not have to click anything. Each mailbox has a setting that turns AI sorting off. Our AI model provider receives the message content only to sort it. Its contract does not allow it to train on your data.
Sending email. CloudOverture can send email from your connected address. It does this only when you or your team tell it to send something, for example a quote or an invoice. The AI never writes or sends an email by itself.
Mail from people who do not use CloudOverture. Your mailbox holds messages from your customers, your vendors, and strangers. Those people are not CloudOverture users. Their messages are part of your business records. We use them only to run the service for you, as the section “Your customers’ information” explains.
Mailbox credentials. We encrypt the sign-in token for a connected mailbox before we store it. We never show it to anyone, and the AI cannot read it. You can disconnect a mailbox at any time in Settings. When you disconnect, all reading and sending stops at once. Emails already saved to your business records stay until you delete them.
Google user data. CloudOverture’s use of information received from Google APIs, and its transfer of that information to any other app, will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain words: we use Gmail data to run the email features you see in the app, to keep the Services secure, and to meet the law, and for nothing else. We do not sell it. We do not use it for ads. We do not use it to train AI models, and our AI providers may not train on it. Our staff does not read it, except with your permission, for security, or when the law requires it. One choice is yours alone: if you connect your own AI provider account, the email sorting runs on that provider, under its terms (see “We do not train AI models on your data” below). You can end that at any time by disconnecting the provider.
Technical data. When you use CloudOverture, our servers log your IP address, browser and device type, pages requested, and timestamps. We use cookies to keep you signed in and to remember your settings. We do not use third-party analytics or advertising scripts. Cloudflare, which serves our website, gives us aggregate visit counts that identify no one.
How we use information
- To run the Services: your account, your subscription, sign-in, support, and the features you use.
- To answer your AI requests. When you use an AI feature, the AI reads your data only to produce the answer or suggestion you asked for. One AI feature runs by itself: after you connect an email account, the AI sorts each incoming email (see “Email accounts you connect” above). Each mailbox has a setting that turns that off.
- To keep the Services secure: finding abuse, fraud, and attacks.
- To improve the Services, using aggregated statistics that do not identify you or your customers.
- To bill you and to meet our legal duties, like tax record-keeping.
- To email you. Service email (invoices, security alerts, renewal notices) comes with your account. Marketing email is separate: every marketing email has an unsubscribe link, and unsubscribing never affects your service. If you joined the waitlist or asked about the partner program, we email you updates about early access, the launch, and the program, and those emails carry the same unsubscribe link.
We do not train AI models on your data. Our AI model providers process your data under terms that forbid them from training on it. One exception: if you connect your own AI provider account or an outside AI assistant, that provider handles your data under its own terms, not ours. This includes email read from a connected mailbox: if you connect your own AI provider, the email sorting runs on it. That is a choice you make, and you can undo it by disconnecting the provider.
We do not sell personal information, and we do not share it for advertising.
Who we share information with
We share data only with the providers that run CloudOverture, and only what each needs:
| Provider | What it does | What it receives |
|---|---|---|
| Amazon Web Services (US) | Hosts the Services and delivers our email (Amazon Simple Email Service) | Your data, encrypted, in US data centers. Email addresses and message content, for delivery |
| Cloudflare, Inc. | Serves and protects our public website | Your IP address and request details when you visit our website |
| Stripe, Inc. | Processes payments | Payment and billing details |
| AI model providers (currently OpenAI) | Answer AI requests and sort incoming email | The data an AI request reads, and the incoming email it sorts, only while processing it, under terms that forbid training on it |
If you connect an outside service, like a Gmail or Microsoft 365 mailbox, your own Stripe account, an outside AI assistant, or your own AI provider account, that service receives what the connection needs, under its own privacy policy. We are not responsible for how a service you connect handles your data. You can disconnect it at any time.
The waitlist and partner forms on our website are served from wintouch.net and store what you enter in Wintouch. Wintouch is our own product, run by the same company, Touchtone Corporation. What you enter in those forms comes to us, not to another business.
Beyond this table: we disclose information if the law requires it (for example, a court order), and we would transfer it as part of a merger or sale of the business, under the same protections and with notice to you.
Our Data Processing Addendum lists the providers that handle the data in your business records, and how we bind them. Cloudflare is not on that list, because it serves our public website and never touches those records.
Your customers’ information
Your business records include personal information about your customers. For that information, we are your service provider. We use it only on your instructions, to run the Services for you. We never use it to contact your customers, except when you tell the Services to send something on your behalf. If a person asks us directly about data your business holds, we will point them to you, because it is your data.
Your choices and rights
- See and change your information. Your account and profile details are in Settings. Your business records are editable in the app.
- Export. You can export your data at any time.
- Access, correction, and deletion requests. Email info@touchtonecorp.com. We answer within 45 days. If a request is complex, we may take up to 45 more days, and we tell you before we do. We may ask you to confirm your identity before we act on a request. If we refuse a request, we say why, and you can ask us to look again. Using these rights never costs you your service.
- Marketing email. Unsubscribe with the link in any marketing email, or ask us by email. We honor it within 10 business days.
How we respond to Do Not Track signals
We do not track you across other websites over time, so there is nothing for a Do Not Track signal to turn off. We treat browser signals like Do Not Track and Global Privacy Control the same way: since we do not sell or share personal information for advertising, there is nothing for them to opt you out of. If that ever changes, we will update this policy first and honor the signals. We do not let any other company track what you do on other websites through our site.
How long we keep information
| Situation | What happens |
|---|---|
| You joined the waitlist or asked about partnership | We keep your details until you unsubscribe or ask us to delete them. If we cancel the product before launch, we delete them within 90 days |
| Trial ends without a subscription | We keep your data 60 days in case you return. We delete it within 90 days of the trial end date |
| Subscription ends (you cancel, or we end it) | For 90 days after the end date you can still sign in and export your data. At 90 days we delete the data |
| Deleted data in backups | Deleted data leaves our backups within 35 days |
| Billing and tax records | We keep them 7 years, as tax law requires |
Email read from a connected mailbox has its own windows. A saved email is part of your business records and follows the table above. An email held for your review keeps its message text for up to 180 days when the AI marked it important or suggested an action, and up to 90 days otherwise. After that, we clear the text and keep only basic details, like the sender and the subject. We delete the record of a dropped email (spam, an auto-reply, or a blocked sender) after 30 days. If you tell the app to ignore an email, or you never act on one we held for your review, we delete its record after 180 days.
We keep data longer only if a law or a legal hold requires it.
Security
We encrypt data in transit and at rest, isolate each business’s data, limit employee access to people who need it for support or operations, and log that access. No system is perfectly secure, so we do not promise perfect security. If a breach affects your information, we will notify you and the authorities as the law requires.
Children
CloudOverture is for businesses, and users must be at least 18. We do not knowingly collect information from children.
Where CloudOverture is offered
We offer CloudOverture to businesses in the United States, and we store data in the United States. We do not market the Services in the European Union.
Changes to this policy
If we make a material change, we email every account holder at least 30 days before it takes effect, in a message about the change and nothing else. Smaller edits update the date at the top. We keep dated copies of every version.
Contact us
Touchtone Corporation
PO Box 5719
Irvine, CA 92616-5719 USA
info@touchtonecorp.com