overADapt
Last updated: April 2026
xTyr, LLC (“xTyr,” “we,” “us,” or “our”) is committed to protecting your privacy. overADapt is a product built and operated by xTyr, LLC. This Privacy Policy describes how we collect, use, store, and disclose information when you use the overADapt platform (“Service”).
When you create an account, we collect your name, email address, company name, and password (stored as a salted hash). We may also collect your job title and phone number if voluntarily provided.
When you connect your advertising accounts (Google Ads, Meta Ads, TikTok Ads), we receive and store OAuth access tokens and refresh tokens. We also retrieve campaign performance metrics including impressions, clicks, conversions, spend, revenue, and ROAS data.
We log all actions taken by the overADapt AI agent on your behalf, including campaign modifications, budget adjustments, bid changes, and audience targeting updates. These logs are retained as part of your audit trail.
We automatically collect information about how you interact with the Service, including pages viewed, features used, browser type, device information, IP address, and session duration.
All data is stored in secured PostgreSQL databases with encryption at rest. OAuth tokens are encrypted using Fernet symmetric encryption (AES-256-CBC with HMAC-SHA256 authentication). Raw credentials are never logged or stored in plaintext.
We implement industry-standard security measures including TLS encryption for data in transit, role-based access controls, regular security audits, and automated vulnerability scanning.
While we employ commercially reasonable safeguards, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
We share your data with third-party advertising platforms (Google, Meta, TikTok) only through authorized API connections that you have explicitly granted via OAuth. This sharing is necessary for the Service to function.
We do not sell your personal data (name, email, credentials) to third parties. However, as outlined in our Terms of Service (Section 3a), de-identified, aggregated, and anonymized data derived from your platform usage — including campaign metrics, performance patterns, and optimization outcomes — may be commercially exploited, licensed, or sold to third parties and used to train machine learning models. By using overADapt, you consent to this data usage.
We may share data with service providers who assist in operating the platform (e.g., hosting, analytics, payment processing), subject to confidentiality obligations. We may also disclose data when required by law, court order, or governmental authority.
We retain your account data and agent activity logs for the duration of your active account plus twenty-four (24) months following account closure or termination. After this retention period, your data is permanently deleted.
You may request earlier deletion of your data by contacting us at privacy@overadapt.com. Deletion requests are processed within thirty (30) days, subject to legal retention requirements.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@overadapt.com. We will respond within thirty (30) days.
overADapt uses essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how the Service is used and to improve the user experience.
You can control cookie preferences through your browser settings. Disabling essential cookies may impair the functionality of the Service.
If you are located in the European Economic Area, we process your personal data under the following legal bases: performance of a contract (to provide the Service), legitimate interests (to improve and secure the Service), and consent (for marketing communications). You have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect and how it is used, the right to delete your personal information, the right to opt-out of the sale of personal information (we do not sell personal information such as name, email, or credentials; de-identified and aggregated usage data may be commercialized as described in our Terms of Service), and the right to non-discrimination for exercising your privacy rights.
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that information promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. For significant changes, we will also send notice to your account email address.
For questions or concerns about this Privacy Policy or our data practices: