Privacy Policy

Last updated: September 10, 2026

overmeshy is an AI 3D asset generation service operated by Overmatch, Inc. (“we”, “us”). This policy describes what information we collect when you use overmeshy, why we collect it, and the choices you have. The short version: we collect what the service needs to run, we do not sell your information, we do not show ads, and we do not use your content to train AI models.

What we collect

Account information. When you sign in with Google we receive your name, email address, and profile picture. That is the entire scope of the sign-in — we request no other Google data and have no access to your Google account beyond it.

Your content. The prompts you write, the images and 3D models you upload, and the assets the service generates for you are stored so your library works. They are private to your account.

Billing information. Payments are processed by Stripe. We receive confirmation of what was purchased and by whom; your card number never touches our systems.

Technical information. Ordinary server logs (IP address, browser type, request timing) and error diagnostics, kept to run and debug the service.

How we use it

• To provide the service: generating, storing, and displaying your assets.
• To operate the credit system and billing.
• To prevent abuse of the service and its free allowance.
• To respond when you contact us for support.
• To diagnose errors and improve reliability.
• To understand which features people use and where requests fail.

We do not sell personal information, we do not share it with advertisers, and we do not use your prompts, uploads, or generated assets to train machine-learning models.

Service providers

overmeshy runs on infrastructure operated by companies working on our behalf: Neon (database, hosted in the United States), Clerk (account sign-in), Cloudflare (hosting and content delivery), fal (GPU processing — your inputs are sent there to run generations), Stripe (payments), Sentry (error diagnostics), PostHog (product analytics, hosted in the United States), and Google (sign-in). Each receives only what its role requires.

Product analytics

We use PostHog to count page visits, feature requests and their success or failure, signup completion, model views, checkout starts, and download requests. We also measure page duration, scroll depth, and loading and interaction performance. Browser storage remembers an analytics identifier; when you sign in, events are linked to your account ID. For accounts with analytics enabled, our server also reports generation outcomes and credit charges or refunds, linked by a generation ID, even if you close the page before the job finishes. Turning analytics off while signed in also disables pending server analytics for your account, including API usage. API access enables account analytics unless you have already opted out. We record API endpoint names, response status and timing, agent turn outcomes, tool names and timing, and model token counts when the provider reports them. Generation events distinguish web, API, and built-in agent activity. We do not send PostHog your name, email, prompts, uploaded files, generated assets, API keys, or URL query strings. Session recording and automatic click capture are disabled.

You can turn analytics off for this browser below. We also honor Do Not Track and Global Privacy Control. Changing this preference reloads this page and does not affect your ability to use overmeshy.

Retention and deletion

Your content stays in your library until you delete it; deleting an asset removes it from our storage. If you want your account and its personal data deleted, email us and we will do it — records we are legally required to keep (such as billing history) are retained for the required period only.

Your rights

You can request a copy of the data we hold about you, correct it, or have it deleted at any time by emailing iman.mostafavi@overmatch.com. Depending on where you live, these rights may also be guaranteed by law (such as the GDPR or the CCPA); we honor such requests regardless of where you live.

Security

Traffic is encrypted in transit, access to production systems is restricted, and payment credentials are handled exclusively by Stripe. No internet service can promise perfect security, but we treat your data as something we would not want leaked either.

Children

overmeshy is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

Changes

If this policy changes materially we will note it here with a new date, and for significant changes we will tell signed-in users directly.

Contact

Questions about this policy or your data: iman.mostafavi@overmatch.com