Privacy Policy — Overlap

Overview

Overlap Networks Inc. (“Overlap”, “we”, “us” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information in connection with:

our website at https://www.overlapnetworks.com and any subdomains (the “Site”);
the Overlap mobile application and web application (together, the “App”); and
any content, products, or services made available from or through the Site or the App (together with the Site and the App, the “Services”).

This Privacy Policy also explains your choices and rights under applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Alberta’s Personal Information Protection Act (PIPA).

Definitions

“Personal information” means information about an identifiable individual.
“Sensitive personal information” means personal information that, due to its nature, requires heightened protection, including demographic information such as nationality, and any information you designate as sensitive in your settings.
“Service Providers” means vendors and other third parties that process personal information on our behalf for business purposes.
“Automatic Grouping” means our automated placement of users into peer groups based on academic information you provide, solely to facilitate networking and community discovery.
“User-Controlled Filters” means optional profile attributes you choose to provide that enable others to discover you through manual searches.

Personal Information We Collect

Information You Provide

We collect personal information that you choose to provide through the Services, including when you create or manage an account. This may include your name, address, email address, phone number, education information, class schedule, career information, profile photo, interests, strengths, preferred ways to connect, and other information that identifies you alone or in combination with other data.

Interactive Features

We and other users may collect personal information, including sensitive personal information, that you submit or make available through public community features (for example, commenting functionalities, forums, blogs, community boards, and social media pages). Information you submit to public community features is visible to others and is considered public. This includes community boards linked to Automatic Grouping. Private messaging or direct chat features are intended only for the designated recipients and are handled as confidential personal information in accordance with this Privacy Policy. If you provide sensitive personal information, we do not use it to infer characteristics about you.

How We Group and Connect Users

To help you contact and communicate with peers at your educational institution, we provide features that match and connect you.

Automatic Grouping

We use the academic information you provide upon sign-up—specifically your class schedule, education level (undergraduate/graduate), faculty, area of focus (concentration or specialization), program year, and graduating class—to automatically place you into relevant peer groups. The sole purpose of this automated categorization is to facilitate academic networking and community discovery.

User-Controlled Filters

You may choose to provide additional optional profile attributes to customize your profile and allow other users to discover you through manual searches. These attributes may include:

Class schedule: days, times, and locations for classes for a student during a specific academic term;
Education details: student status (international/domestic) and residence status;
Career details: dream job title, dream job industry, current job title, current job industry, years of experience, and total years of work experience.
Demographic details: nationality (subject to special protections below).

Special Protection & Opt-In for Demographic Information (Nationality)

Providing your nationality is voluntary and requires your explicit opt-in during setup or in your privacy settings.

Strict opt-in required: We do not collect, process, or share nationality by default. Nationality is enabled only if you explicitly opt in.
Full user control: You may change or withdraw your opt-in consent or permanently delete your nationality at any time through your account settings.

Your Control Over Your Data

You can update, change, or remove optional profile attributes at any time through your account settings to adjust how you appear to others or how your groupings are generated. Required attributes necessary for account verification and core App functionality—such as education level, faculty, program, area of focus (concentration or specialization), program year, and expected graduation—cannot be removed entirely while your account remains active, but you may update them if your academic status changes.

Account Deletion and Retention

You can delete your account at any time in Settings under “Account.” Upon initiating deletion:

We will deactivate your account immediately and remove your profile from in-app visibility.
We will delete or de-identify personal information within [30 days] of deactivation, subject to the exceptions below.
Exceptions:

a) Content persistence: Chat history, forum posts, and comments remain visible to participants and community threads; your display name will appear as “deleted user,” and affected chats become read-only.
b) Legal, security, and operational needs: We may retain information as required or permitted by law, to respond to complaints or disputes, to enforce our terms, or to maintain security and integrity.
c) Backup systems: Information may persist in backup archives for up to [90 days] after deletion, after which it will be overwritten in the ordinary course.

If you reinstall or return after deletion is complete, you will need to create a new account.

Usage Data We Automatically Collect

We may automatically collect certain information when you use the Services, such as IP address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, browser or device information, approximate location (derived from IP), Internet service provider, pages visited before/during/after using the Services, links you click, content you interact with, and the frequency and duration of your activities.

Cookies and Other Technologies

Technologies We Use

We and certain third parties use cookies, pixel tags/web beacons, and similar technologies (“Technologies”) to collect information automatically through the Services.

Strictly Necessary Cookies: Essential for security, authentication, session management, and load balancing. You cannot opt out because the Services will not function without them.
Performance-Related: Used to assess and improve Service performance and understand usage patterns.
Functionality-Related: Enable enhanced features such as recognizing you when you sign in and remembering your preferences.
Analytics: We use Technologies and third-party tools—such as Google Analytics, DataDog, and Amplitude—to better understand how our digital Services are used and to improve and personalize the Services. For how Google uses personal information (including for its own purposes), please see Google Analytics’ privacy materials. To opt out of Google Analytics, please use the Google Analytics opt-out add-on or your browser/device settings.

Managing Preferences

You can control cookies via your browser settings, including refusing or deleting cookies or configuring notifications when cookies are set. Disabling strictly necessary cookies may impair Service functionality. You may also manage some analytics and advertising preferences through device settings and platform controls where available.

Social Media Features

Our Services may include social media buttons (for example, LinkedIn, Facebook, Instagram, and X). These features may collect your IP address, the page you visit, and may set a cookie to enable the feature to function. Your interactions with these features are governed by the privacy policy of the provider.

Do Not Track and Global Privacy Control

Do Not Track (DNT): Because there is no common industry standard for responding to DNT signals, we do not currently respond to DNT.
Global Privacy Control (GPC): We honour GPC signals where required by applicable law. GPC may need to be enabled separately on each browser or device you use.

Personal Information from Other Sources

We may obtain personal information about you from other sources, such as third-party applications (for example, single sign-on providers or social networking sites) consistent with your privacy settings on those services.

How We Use Personal Information

We may use personal information, including sensitive personal information, as described at the point of collection and in this Privacy Policy, for the following purposes:

To operate, maintain, and improve the Services;
To detect, prevent, and address technical issues;
To monitor and analyse usage of the Services;
To deliver Services and features you request;
To communicate with you about events, publications, and Services we provide;
To understand how you interact with the Services and to tailor content and information;
For security and fraud prevention;
To comply with applicable laws and regulatory requirements;
To enforce and protect our rights and the rights of others, including assisting law enforcement, campus police, or other authorities;
To consider you for certain opportunities;
For research and analytics;
To fulfil any other purpose for which you provide personal information; and
For other purposes with your consent.

Disclosure of Personal Information

We may disclose personal information for business purposes to:

Service Providers: Vendors and other third parties that assist with functions such as marketing communications, analytics, management services, research or surveys, mail and email services, database hosting and maintenance, and payment processing.
Business Partners: Third parties such as product suppliers, joint marketing partners, co-branded service partners, and analytics partners.
Other Users or Third Parties You Share or Interact With: As described above, you may choose to share information with other users and, in public areas, with the general public. What you share in these contexts is up to you.
Disclosures Under Special Circumstances: We may disclose information when we believe it is necessary to: (a) meet any applicable law, regulation, legal process, or other legal obligation; (b) prevent harm, illegal activity, or financial loss; (c) detect, prevent, or investigate technical or security issues; or (d) cooperate with law enforcement, government, quasi‑governmental, or public agency requests or reporting requirements. Any such disclosure will be limited to what is necessary for the permitted purpose and, where appropriate, subject to confidentiality protections.
Corporate Transactions: We may transfer personal information in connection with a contemplated or completed reorganization, conversion, merger, sale, joint venture, assignment, transfer, or disposition of all or part of our business or assets.
At Your Direction: We may disclose or transfer your information to third parties when you ask or direct us to do so.

Cross-Border Processing and Transfers

We may process and store personal information inside and outside Canada, including in jurisdictions that may have different data protection laws than Canada. Personal information processed in another jurisdiction may be subject to access by foreign courts, law enforcement, and regulatory authorities in accordance with the laws of that jurisdiction. We take contractual and other measures with Service Providers to provide a comparable level of protection while information is processed outside Canada, including requirements for confidentiality, security safeguards, and limitations on use and disclosure.

How We Protect Personal Information

We use commercially reasonable technical, physical, and administrative safeguards to protect personal information against loss, theft, and unauthorized access, use, disclosure, or modification. No security safeguards are perfect and we cannot guarantee absolute security.

How Long We Retain Personal Information

We retain personal information only as long as necessary to fulfil the purposes identified in this Privacy Policy or at the time of collection, to meet legal and regulatory requirements, to resolve disputes, and to enforce our agreements. Our retention approach for account deletion is described in the “Account Deletion and Retention” section above.

Your Rights and Choices

Subject to applicable law and certain exceptions, you may exercise the following:

Access: Request access to your personal information and information about our handling of it.
Correction: Request correction of inaccurate or incomplete personal information.
Withdraw Consent: Where we rely on consent, withdraw your consent at any time (this may affect your ability to use certain features).
Deletion: Request deletion of your personal information, subject to legal and operational exceptions (see “Account Deletion and Retention”).

We may require sufficient information to verify your identity before responding, which may include confirming control of your account, verifying contact details, or requesting limited additional information to match our records. We will respond within timelines required by applicable law.

To make a request, contact us at developer@overlapnetworks.com.

Alberta Residents – Your Privacy Rights

If you are a resident of Alberta and Overlap handles your personal information in the course of its commercial activities in Alberta, Alberta’s Personal Information Protection Act (PIPA) provides you with rights, subject to limited exceptions, including to:

request access to your personal information under our custody or control and information about how it has been used and disclosed by us;
request correction of your personal information if it is inaccurate or incomplete;
withdraw your consent to our collection, use, or disclosure of your personal information, on reasonable notice, subject to legal or contractual restrictions; and
make a complaint to the Office of the Information and Privacy Commissioner of Alberta regarding our compliance with PIPA.

You may submit a Request to Know (access), Request to Correct, or Request to Delete by contacting us at developer@overlapnetworks.com. We may require verification of identity before acting on your request. If we refuse a request, we will provide the reasons, subject to applicable law, and advise you of any available recourse.

Children’s Privacy

We do not knowingly collect or store personal information of individuals under 16 years of age, and the Services are not directed to anyone under that age. If we become aware that we have collected personal information from an individual under 16, we will remove it from our files. If you are a parent or guardian and believe we may have inadvertently collected your child’s information, please contact us at developer@overlapnetworks.com.

Third-Party Websites

The Services may contain links to websites or services not operated or controlled by us. We are not responsible for the privacy practices of those third parties. You should review their privacy policies before providing personal information.

Contact and Privacy Officer

If you have questions or concerns about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, please contact:

Privacy Officer

Overlap Networks Inc.

Email: developer@overlapnetworks.com

Mailing Address: 10554 114 Street NW, Edmonton, Alberta, T5H 3J7, Canada

Changes to This Privacy Policy

We may modify this Privacy Policy from time to time. If we make material changes, we will provide prominent in‑App notice before the changes become effective. Your continued use of the Services after the effective date constitutes your acceptance of the updated policy. The current version is available at any time within the App.