Privacy policy
Short version: this website sets no cookies and does no tracking. The personal data we get is what you send us by email, which we use to reply, and the business contact details of people at software companies that we may get in touch with about our service (see Business contacts we reach out to).
Who is responsible
The controller of your personal data is Marek Salvet, trading as OVERSHOOT, IČO 10910905, Baarova 1478/39a, 140 00 Praha 4, Czech Republic, email hello@overshoot.cz. See the imprint.
What this website collects
- No cookies. The site sets no cookies of any kind.
- No tracking. No analytics, no advertising pixels, no social media plugins, no fingerprinting.
- No browser storage by us. The site does not use localStorage, sessionStorage or IndexedDB. Your browser may keep our host's short error-reporting setting (Network Error Logging) for up to 7 days.
- No third-party requests. Fonts, scripts and videos are served from our own site, not from external CDNs. The only other address your browser may contact is the error-reporting service of our host Cloudflare (a.nel.cloudflare.com), and only if a page fails to load. Such a report contains the page address, the type of error and technical browser data.
- The contact form sends nothing. It only opens your own email app with a prefilled message. Nothing reaches us until you press send there.
- Server logs. Cloudflare, Inc. hosts this site (Cloudflare Workers). To deliver pages and keep the site secure, Cloudflare processes technical data for each request: IP address, time, requested page and browser type. It keeps this data for a short period under its own retention rules; we don't combine it with anything else. Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR). For transfers to the US, see "Transfers outside the EU" below.
What we process when you email us
Your email address and whatever you choose to include: your name, company, app links, screens and project details.
| Purpose | Replying to you, preparing a quote or a preview cut, and, if we work together, carrying out the commission. |
|---|---|
| Legal basis | Steps taken at your request before entering into a contract and performance of a contract (Art. 6(1)(b) GDPR); our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR); legal obligations such as accounting (Art. 6(1)(c) GDPR). |
| Retention | Enquiries that don't lead to a commission: deleted no later than 12 months after our last message. Commissions: for the duration of the contract and then for as long as Czech tax and accounting law requires, usually up to 10 years after the end of the year of the invoice. |
| Recipients | Our email provider INTERNET CZ, a.s. (FORPSI), Czech Republic. Cloudflare, Inc., which hosts this site and the private links we use to share previews and deliveries. If we work together: our invoicing service and bank, our accountant or tax adviser, and public authorities where the law requires it (for example the tax office). Service providers process the data only on our behalf. We don't sell your data or share it for marketing. |
| Transfers outside the EU | Our email provider stores email in the Czech Republic. Cloudflare, Inc., which hosts this site and our preview links, is a US company; where data reaches the US, the transfer relies on the EU–US Data Privacy Framework, under which Cloudflare is certified, and on the European Commission's standard contractual clauses. |
You don't have to give us any data, but without an email address we can't reply to you. If you email us, we don't use your address for newsletters or marketing unless you ask for it.
Business contacts we reach out to
This section is for people who did not contact us first: we found your professional contact details ourselves and wrote to you (by email, by LinkedIn message or through a contact form) about our service. Under Art. 14 GDPR we owe you the following information. If you are reading this because we wrote to you, it explains why.
| Why we have your data | We make product videos for software companies. We look for apps and software products that could use one and contact a person or a shared business address at the company. We write to people individually and in small numbers, not in bulk mailings. Which channel we use (email, LinkedIn or a contact form) depends on the country of the company. |
|---|---|
| What data | Your name (only if it is published), your job title or role, your work email address or business LinkedIn profile, your company and product, the country of the company, a short note on why we think a video could be relevant, the source and date of the contact details, and a record of our messages and your replies. We don't use private or free-mail addresses (such as Gmail or Outlook), and we don't collect any special categories of data. |
| Where it comes from | Publicly available business sources only: the contact page of the company's own website; the app's public listing on Google Play (including the developer contact email that Google shows there) or on the Apple App Store (developer name and website); public launch pages such as Product Hunt; public company registers (for example Companies House, to check the type of company); and public professional profiles on LinkedIn. Our first message tells you which of these sources we used for you. We don't buy contact lists, and we never guess or construct email addresses. |
| How we choose who to contact | We use a simple tool that reads public app store listings and shortlists apps by facts about the product (for example how recently it was updated, how many ratings it has, and whether its listing already has a video). A person then reviews every lead and writes every message by hand. The shortlist is about the product, not about you, and it has no legal or similarly significant effect on you. |
| What we do with it | We contact you to tell you about our service and, if you reply, to talk it through. We may also prepare a short (about five seconds), watermarked preview of your product, made from screenshots of publicly available material (your website or store listing) to show you the style. We avoid capturing people, names or customer content shown on those pages. We share the preview only with you, as a private link that is not listed publicly (a file stored on Cloudflare R2, reachable only through the link we send you), we don't publish it, and we delete it within 30 days if you show no interest, or sooner if you ask. The terms for previews are in item 3 of our terms. |
| Legal basis | Our legitimate interest in finding commissions for our business (Art. 6(1)(f) GDPR and UK GDPR). We have weighed it against your interests in a written assessment, which we can describe to you on request. National rules on electronic marketing are separate from data protection law and apply in addition. |
| How long we keep it | If you don't reply: deleted no later than 6 months after our last message. If you reply and a conversation follows, see "What we process when you email us" above. If you object, we keep only the minimum needed to honour it (see below). |
| Who receives it | Our email provider INTERNET CZ, a.s. (FORPSI), Czech Republic if we write by email, LinkedIn if we write there, and Cloudflare (R2 storage), which stores the preview file. Our contact records are kept on our own computer. We don't sell your data or pass it to anyone for their marketing. See "Transfers outside the EU" above for transfers outside the EEA. |
| Your choice | You have the right to object at any time to our use of your data for direct marketing, and the objection is absolute. Reply "no" to our message or write to hello@overshoot.cz. We stop at once and add your email address, or your company's domain, and the date to a do-not-contact list so that we don't write to you again. This is the only record we keep after an objection; it is kept for as long as needed to honour it. |
| Providing the data | You are not required to provide any data to us. We obtained it from the sources above, not from you. We don't make automated decisions about you. |
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. To use any of these rights, email hello@overshoot.cz.
You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz. If you are in the United Kingdom, you can also complain to the Information Commissioner's Office (ico.org.uk).