Privacy policy
Last updated October 13, 2026
1. Who we are
OverShoot makes tools for animators, starting with the OverShoot panel for After Effects. Mailing address: Montréal QC, Canada. Email: support@overshoot.tools.
2. Privacy officer
Privacy officer: Ranine Chav Khun, support@overshoot.tools, at the address above.
3. What we collect
Your email address, the language of the page, your country (from your connection, never asked) and, if you give it, your name. When you sign up: the exact wording you agreed to, the time, your IP address and your browser. When you use the panel: your licence, a random install id the panel makes (never a hardware fingerprint), the panel version, the host app and your operating system. Our servers also see what every website sees (IP address, time, page) and run Cloudflare Turnstile, an anti-bot check that reads browser signals. If you pay, the payment company handles your card; we never see it.
4. Why, and on what basis
To send what you asked for (the confirmation, download links, sign-in codes, your licence): needed to provide it. To send news about OverShoot and our other tools: only with your consent. To send update notices for a tool you own (a new version, a fix): part of providing the tool, and you can turn them off. To prevent abuse and keep proof of your choices: our legal obligations and our legitimate interest in a working, honest service.
5. How we collect it
Only from you, through our forms on overshoot.tools and through the panel when you activate it. We never buy, rent or import lists.
6. Consent, and how to withdraw it
We ask before sending news, and we keep the exact wording you saw. Every news email has a one-click unsubscribe that works at once; update notices have their own link; you can also write to support@overshoot.tools. Withdrawing does not stop emails you ask for, like a download link.
7. Who we share it with, and where it is kept
We do not sell or rent your information. Three providers handle it for us, under their data-processing agreements: Cloudflare (our website, servers and database, in the United States and its global network), Amazon Web Services (email delivery, in Ohio, United States) and, when we take payments, Stripe (United States). Your information may therefore be stored outside Québec, including in the United States. For people in the European Union, these transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, as each provider's agreement says.
8. Tracking
No advertising, no tracking pixels and no analytics cookies. We do not track whether you open our emails. When we count clicks on a link in an email, we count them per link, not per person.
9. The emails we send on our own initiative
Two kinds. News about OverShoot and our other tools, a few times a year, only if you asked for it; unsubscribe in one click. Update notices for a tool you own, on by default, factual only; turn them off with the link in each one. Everything else (confirmations, download links, codes) is sent only because you asked.
10. How long we keep it
Sign-ups never confirmed: 30 days, then deleted. Download links: deleted 30 days after they expire. Your account and licences: as long as you hold a licence or stay subscribed. Records of emails sent: 6 months, then archived in compressed form and deleted after 36 months. Proof of consent: while you are subscribed, then 3 years after our last email to you. Payment records: as long as tax law requires. Technical logs: 90 days. Amazon's email service keeps addresses that bounced on a list it uses to protect delivery; we remove you from it when you ask us to delete your information.
11. Security
Access is limited to the two people who run OverShoot, each with two-step login. Links in our emails are signed so nobody can forge them, keys are stored only as fingerprints, secrets live in a password vault, and backups are encrypted.
12. Your rights
You can ask to see your information, correct it, receive a copy in a common format, withdraw consent, or have it deleted. Write to support@overshoot.tools. We confirm it is really you, answer within 30 days, and it is free.
13. Complaints
Write to us first at support@overshoot.tools. You can also complain to the Commission d'accès à l'information du Québec, or, if you live in the European Union, to the data protection authority of your country.
14. Children
OverShoot is not meant for people under 14. If we learn that we hold information about a child under 14 without a parent's consent, we delete it.
15. Who does what
Two people run OverShoot: the president, and the privacy officer named above, who answers every request about your information.
16. What we keep after deleting you
When you ask us to delete your information, we remove your name, your browser details and your account at once, and we cancel your licences. To prove we had your consent, the law makes us keep the consent records (the date and the wording, without your name) for 3 years, and a scrambled code of your address so we never email you again by mistake. If you sign up again yourself, we start fresh.
17. Backups
Encrypted copies of our database are kept for up to 12 months. A deletion is also applied to our archive the same day; your information disappears from the backups as they expire, and is removed again if we ever have to restore one.
18. Changes to this policy
We post every change here with a new date. If a change affects how we use your information, we tell you by email before it applies.
19. Last updated
October 13, 2026.