Privacy Policy

This Privacy Policy describes how Mac's Tech LLC, a Utah limited liability company doing business as Overwatch ("Overwatch," "we," "us," or "our"), collects, uses, discloses, and safeguards personal information in connection with our mobile surveillance trailer rental services, the overwatch.tech website (the "Site"), the customer portal, associated SMS notifications, and any related products or services (collectively, the "Services").

By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, do not use the Services. This Privacy Policy is incorporated into and supplements our SMS Terms & Conditions and any rental agreement you have with Overwatch.

1. Scope and applicability

This Privacy Policy applies to personal information we collect from:

• Visitors to the Site
• Customers who rent surveillance trailers from Overwatch
• Authorized Recipients designated by Customers to receive camera access notifications
• Portal users (administrators, organizational users, and operators) accessing the customer portal
• Individuals who contact us by email or phone

This Privacy Policy does not apply to information collected by third parties operating their own privacy practices, even when accessed through the Services. Camera footage captured by deployed surveillance trailers is governed by separate terms in the rental agreement and by 3dEYE's platform settings; this Privacy Policy addresses only customer-account data.

2. Information we collect

We collect the following categories of personal information:

2.1 Information you provide directly

• Identifiers: company name, contact name, email address, phone numbers (primary and additional recipients), billing name and address
• Rental information: trailer selections, deployment address, rental dates, rental term, contract details, requested services
• Commercial information: rental history, total cost, invoice records, payment confirmations
• Account credentials (portal users only): login email, hashed password, role, organization affiliation
• Communications: emails, SMS responses, support requests, and any information you choose to share when contacting us

2.2 Information collected automatically

• Device and connection data: IP address, browser type and version, operating system, language preferences, device identifiers, referring URL, pages visited, timestamps
• Server logs: request paths, response codes, error logs (with personally identifiable information redacted where reasonably practicable)
• Cookies and similar technologies: session cookies and authentication cookies necessary to keep you logged into the portal and to remember your preferences. We do not use third-party advertising cookies, tracking pixels, or behavioral profiling tools on the Site.

2.3 Information from third parties

• Payment processor: billing confirmation status (we do not receive full credit card numbers)
• Accounting software (QuickBooks): invoice and payment records
• Authentication provider: email verification status

2.4 Sensitive personal information

We do not knowingly collect Social Security numbers, government-issued ID numbers, financial account numbers, precise geolocation, biometric data, health information, racial or ethnic origin, religious beliefs, or other categories of sensitive personal information. If you provide such information voluntarily, we will not use it beyond the purpose for which you submitted it.

3. How we use information

We process personal information for the following purposes:

• Service delivery: to provision rental trailers, generate camera-access links, schedule access renewals, send transactional notifications, and manage the rental lifecycle
• Communications: to send rental confirmations, renewal reminders, expiration warnings, and respond to inquiries
• Billing and accounting: to process payments, generate invoices, and maintain financial records
• Security and fraud prevention: to detect, investigate, and prevent unauthorized access, fraud, and abuse of the Services
• Compliance: to comply with applicable laws, regulations, court orders, and legitimate governmental requests
• Service improvement: to analyze usage patterns in aggregate and improve reliability, accuracy, and user experience
• Audit and recordkeeping: to maintain logs required by carriers (for SMS), payment processors, and applicable law

We do not use personal information to sell to third parties, build advertising profiles, or train third-party machine-learning models.

4. Legal bases for processing

For users protected by the EU General Data Protection Regulation, the UK GDPR, or similar frameworks, we rely on the following legal bases:

• Contract: processing necessary to perform our rental agreement with you
• Consent: for SMS messaging and any optional communications, withdrawable at any time
• Legal obligation: recordkeeping for tax, regulatory, and audit purposes
• Legitimate interests: security, fraud prevention, and reasonable service operation, balanced against your rights

The Services are intended for customers in the United States. If you access the Services from outside the United States, you acknowledge that your information will be processed in the United States, which may have different data protection laws than your country of residence.

5. How we share information

We disclose personal information to the following categories of recipients only as needed to operate the Services:

5.1 Service providers (data processors)

• Twilio Inc. — SMS delivery (recipient phone number, message content, delivery status)
• 3dEYE — camera streaming, share-link generation, access logs (camera IDs, recipient email, share metadata)
• Supabase — database hosting, authentication, file storage
• Vercel Inc. — web hosting, edge serving, deployment infrastructure
• Intuit / QuickBooks — invoicing, accounting, payment reconciliation
• Resend — transactional email delivery

Each service provider is bound by contractual obligations to use personal information only to provide services to Overwatch and to maintain reasonable security safeguards.

5.2 Legal and safety

• To comply with applicable law, regulation, valid legal process, or governmental request
• To enforce our agreements and protect our rights, property, or safety, or those of our customers, employees, or the public
• In connection with the investigation, prevention, or response to suspected fraud, security incidents, or unlawful activity

5.3 Business transfers

If Overwatch is involved in a merger, acquisition, financing, reorganization, or sale of all or substantially all of its assets, personal information may be transferred to the successor or acquirer as part of that transaction, subject to a confidentiality obligation and continued application of this Privacy Policy.

5.4 With your direction

When you designate Authorized Recipients in the rental form, we share camera-access links with those recipients via SMS. We act on your instructions in providing this access.

5.5 No sale of personal information

Overwatch does not sell personal information for monetary or other valuable consideration. We do not share personal information for cross-context behavioral advertising. SMS opt-in data and consent records are never shared with third parties for promotional purposes, and they are not shared with affiliates for their own marketing.

6. Data retention

We retain personal information for the following periods:

• Rental records and invoices: seven (7) years following the end of the rental, to satisfy tax and contractual recordkeeping obligations
• Account credentials: for the life of the account, plus thirty (30) days after deactivation
• Server logs: ninety (90) days, then aggregated or deleted
• SMS consent records: a minimum of four (4) years after opt-in or opt-out, as required by carrier and regulatory standards
• SMS message metadata: retained as long as required by Twilio's terms of service and applicable law
• Camera footage: retention is governed by your service agreement and 3dEYE platform configuration; not held by Overwatch outside that platform

Where practical and legally permissible, we anonymize or aggregate data instead of deleting it for analytical or business-continuity purposes.

7. Security

We implement reasonable administrative, technical, and physical safeguards, including:

• Encryption of data in transit (TLS) and encryption at rest for stored database fields containing sensitive credentials
• Role-based access controls and row-level security policies in our database
• Hashed and salted authentication credentials
• Time-limited share links and cryptographically generated tokens
• Logging and monitoring of administrative access
• Periodic credential rotation and access review

No system is perfectly secure. If you believe your account or any personal information has been compromised, contact us immediately at the address below. We will notify affected individuals of any data breach as required by applicable law.

8. Your privacy rights

8.1 General rights

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete personal information
• Request deletion of personal information (subject to recordkeeping obligations)
• Withdraw consent to SMS messaging at any time by replying STOP
• Lodge a complaint with a supervisory authority

8.2 California residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

• Right to know: the categories and specific pieces of personal information we have collected, the categories of sources, the purposes of collection, and the categories of recipients
• Right to delete: personal information we have collected from you, subject to legal exceptions
• Right to correct: inaccurate personal information we maintain about you
• Right to opt out of sale or sharing: Overwatch does not sell personal information or share it for cross-context behavioral advertising, so this right is honored by default
• Right to limit use of sensitive personal information: Overwatch does not collect sensitive personal information except as described in Section 2.4
• Right to non-discrimination: we will not deny services, charge different prices, or provide a different level of service because you exercised any of these rights

To exercise these rights, email privacy@overwatch.tech. We will respond within forty-five (45) days, with a one-time forty-five-day extension where reasonably necessary. We will verify your identity using information already in our records before fulfilling a request.

8.3 Virginia, Colorado, Connecticut, Utah, and similar state law residents

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and Utah) have rights to access, correct, delete, and obtain a portable copy of their personal information, as well as the right to opt out of targeted advertising and the sale of personal information. Overwatch does not engage in either of those practices, but you may exercise the access, correction, deletion, and portability rights by contacting us as described above.

8.4 Authorized agents

You may designate an authorized agent to exercise privacy rights on your behalf. We will require written authorization, identity verification of the agent, and direct confirmation from you before fulfilling agent requests.

9. Cookies and tracking technologies

The Site uses only cookies that are strictly necessary for service operation — primarily session and authentication cookies. We do not use third-party advertising, analytics tracking pixels, behavioral profiling, or cross-site tracking. Because we do not track across sites, the Site does not respond to "Do Not Track" browser signals beyond honoring our default no-tracking practice. You may disable cookies in your browser, but doing so will prevent the portal from functioning.

10. SMS-specific privacy

When you opt in to SMS messages, the phone number, opt-in timestamp, originating IP address, and consent confirmation are recorded as proof of consent. SMS message content (including the camera-access link) is delivered through Twilio. Twilio processes message content for the limited purpose of delivery in accordance with Twilio's privacy practices. SMS opt-in and consent data are never shared with third parties for promotional purposes. See our SMS Terms & Conditions for full details on the SMS program.

11. Children's privacy

The Services are intended for businesses and adults age eighteen (18) and over. We do not knowingly collect personal information from children under thirteen (13). If you believe a child has provided us with personal information, contact us immediately and we will take steps to delete it.

12. Third-party links

The Services may contain links to third-party websites and services that are not operated by Overwatch. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy practices.

13. International transfers

Overwatch operates from the United States. Personal information is stored and processed in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country.

14. Changes to this Privacy Policy

We may update this Privacy Policy at any time to reflect changes in our practices, services, or legal requirements. We will post the revised policy on this page and update the "last updated" date. For material changes, we will provide additional notice (such as via email or a prominent notice on the Site) before the changes take effect. Continued use of the Services after the effective date of any change constitutes acceptance of the revised Privacy Policy.

15. Contact us

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

Mac's Tech LLC (DBA Overwatch)
Attn: Privacy Officer
Email: privacy@overwatch.tech
General support: support@overwatch.tech
Web: overwatch.tech

This Privacy Policy is provided for informational purposes and does not constitute legal advice. Overwatch encourages users with specific legal questions to consult an attorney.