What we collect, and what we don't

Effective October 8, 2026

Your mail is stored on your Mac, and nowhere else. We never receive your mail, calendar, chats, files, Google tokens or AI provider keys.

This policy explains how Agentically.com, Inc. ("the Company," "we," "us"), the company that makes Overcoat, handles information when you use the Overcoat app, the website at overcoat.app, and Overcoat accounts and Premium (the "Service"). It's part of our Terms of Service.

The app (Free and Premium)

Your mail and calendars (Gmail and Google Calendar, Outlook, or iCloud) are copied into an encrypted database on your Mac, straight from your provider. Nothing is sent to us.
If you connect a cloud AI provider, the app sends what a question needs to that provider, under your own key with it and its terms. You choose the provider; today the choices are Anthropic (Claude, the default), OpenAI (ChatGPT models) and Google (Gemini), and we may add others. Only the provider you've chosen receives anything, and only while it's turned on. Passwords, codes and account numbers are removed first. Names, email addresses, phone numbers and street addresses go as written unless you turn on Hide names, which swaps them for placeholders. Every request is listed in the app exactly as it went, with the provider it went to. See what Overcoat does with your Google account.
Each provider handles what it receives under its own terms and privacy policy, which we don't control: how long it keeps requests, and whether it may use them to improve its models (paid API access generally excludes that by default, but some free tiers don't). Check your provider's terms before you connect it.
The app checks overcoat.app for updates and, once linked, for your plan. Those requests carry your Mac's install id, its public key, its name and the app version, never your mail or anything from it.
When you paste a link into a chat, your Mac opens that page itself, the way a browser would (the site sees your Mac's internet address). Only links you paste, only public websites, never a link from an email.
No analytics, tracking or advertising, in the app or on this site.

Google user data

Overcoat's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail and Calendar data is read on your Mac, read-only, to show it to you and answer your questions. It is never sent to the Company, never sold, never used for advertising, never used by us to train AI models, and never read by people at the Company. It is sent to a cloud AI provider only when you connect one and turn it on, only to the provider you chose, only as each question needs, and as described above.

Outlook and iCloud

If you connect Outlook, you sign in with Microsoft and allow Overcoat to read your mail and calendar, nothing more: a sign-in that allows anything wider is refused. If you connect iCloud, you give Overcoat an app-specific password, which Apple lets you create for one app and revoke at any time; it can't change your Apple ID. Either way the sign-in stays in your Mac's Keychain, the mail and calendars are read on your Mac, read-only, and they are handled exactly as Google data is above: never sent to the Company, never sold, never used for advertising or to train AI models, and never read by people at the Company.

Your Overcoat account

Every install links to a free Overcoat account: just an email address, signed in by emailed link (no password). It's how updates, Premium and help reach you. Here is everything it holds.

WhatWhyKept

Your email addressTo sign you in (by emailed link), and for receipts and a few account emails (welcome, trial ending, a failed payment)Until you delete the account

If you answer them: a first name, whether it's for personal or work mail, how you heard of OvercoatTo understand who Overcoat is for (asked once, before the download; all optional)Until you delete the account

Plan and billing statusTo know whether Premium is on (Free has no billing at all)Until you delete the account, then as long as tax and accounting law requires

When you ask for a sign-in link: the link (only a one-way hash of it) and a one-way hash of your network addressTo sign you in once, and so no one can flood people with sign-in emails or block everyone else'sOne hour

Sign-in sessionsTo keep you signed in (30 days)Until they expire

Your Macs: an id, its public key, its name, app version, last check-inTo switch your plan on there and tell you about updatesUntil you unlink them

Only if you turn on Deliver while my Mac sleeps: sealed notifications, your phone's push address, and when each is dueTo send your brief, reminders and heads-ups on time while your Mac is asleep. Each is encrypted on your Mac to your phone's own keys: we can't read them, only pass them onUntil sent (or two hours past due), and replaced whenever your Mac updates them

Invites: your invite code, who invited you (if anyone), which friends joined through your link, and free time earnedTo give you and your friends the invite rewards, once per friend and once per Mac. Friends see nothing about you, and you see only how many joined, not whoUntil you delete the account

A record of account events (signed in, plan changed, a Mac linked, an invite reward)Security and supportUntil you delete the account

The website uses one cookie, to keep you signed in to your account. Like any website, our hosting provider receives the technical details of each request (such as IP address and browser) and keeps them briefly in its logs for security and operations. Our own logs never record your email address or sign-in links.

Who helps us run it

Stripe handles payments and holds your card; we never see the number.
Netlify hosts this site and the account service; Neon hosts its database.
Resend delivers sign-in and account emails.

They process this information on our behalf, under their own privacy and security commitments. We may also disclose information if the law requires it, to protect the rights, safety or property of the Company, our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.

What we don't do

We don't sell or rent personal information, and we don't "share" it for cross-context behavioral advertising. We don't use it to train AI models. We don't use advertising or tracking cookies.

Security

The account service stores only what's listed above, over encrypted connections. Mail and everything else the app keeps stays on your Mac, encrypted. No system is perfectly secure, and we can't guarantee the security of information sent over the internet or stored on your devices.

Your choices and rights

You can see your plan and linked Macs on your account page, unlink a Mac there, and cancel Premium there. Ask us at support@overcoat.app for a copy of what we hold, to correct it, or to delete your account; cancel Premium first. Depending on where you live (for example California, other U.S. states, or the European Economic Area and United Kingdom), you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, and not to be discriminated against for using these rights. We'll respond as the law requires and may need to verify that the request comes from you. Where the GDPR applies, we process account information to provide the Service you asked for (contract), to meet legal obligations, and for our legitimate interests in security and understanding who uses Overcoat; you may complain to your local data protection authority.

Where it's processed

We're based in the United States, and our service providers process account information in the United States. By using the Service you understand your information will be processed there.

Children

The Service is for adults (18 and over). We don't knowingly collect personal information from children. If you think a child has given us information, write to us and we'll delete it.

Changes

We may update this policy. We'll post the new version here with a new effective date and, for material changes, tell you by email or in the app.

Contact

Agentically.com, Inc. · support@overcoat.app