Privacy Policy

Last updated: August 27, 2026

Draft placeholder — this page’s final language is pending legal review and will be replaced before launch.

This policy describes what OverpayCheck collects when you use OverpayCheck.org, why we collect it, and the choices you have. The short version: we collect only what we need to run your check, match you with participating providers, and operate the service — and we do not sell your personal information.

1. Information you provide

2. Information collected automatically

3. Why we collect it

4. How we share it

We do not sell your personal information to anyone.

5. Cookies and choices

Our cookies are first-party and functional (visitor identity and check resume). You can block or delete cookies in your browser settings; the site will work, but an in-progress check won’t resume automatically.

6. Security

We use industry-standard practices to protect your data: HTTPS everywhere, secure HTTP headers, input validation, secrets kept out of client code, and access limited to what the service needs. No system is perfectly secure, but minimizing what we collect is part of our security posture.

7. Retention

We keep check records, consent evidence, and analytics for as long as needed for the purposes above and for legal/audit requirements, then delete or de-identify them. You may request deletion at any time (see Your rights).

8. Your rights

Depending on your state, you may have the right to know what personal information we hold about you, to correct it, to delete it, and to opt out of the sale of personal information or its sharing for cross-context targeted advertising. We honor these requests regardless of the requester’s state where feasible. To exercise any right, email privacy@overpaycheck.org or see Do Not Sell or Share My Personal Information. We will verify your request using the email associated with your check and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

9. Children

The service is not directed to children and is intended for users 18 and older. We do not knowingly collect information from anyone under 16; if you believe a minor has provided us information, contact us and we will delete it.

10. Links to other websites

When you continue to a provider or follow an external link, that site’s privacy practices apply, not this policy. Review the privacy policy of any site you visit.

11. Changes to this policy

We may update this policy as the service evolves. The “Last updated” date reflects the current version, and material changes will be highlighted on this page.

12. Contact

Privacy questions or requests: privacy@overpaycheck.org.