Legal

Privacy Policy

Effective September 18, 2026

This Privacy Policy explains how AURUM DAYS LLC ("Overrate", "we", "us") collects, uses, shares and protects information when you visit our website, use our free invoice check, or work with us.

1. Information we collect

Information you give us. Your contact details (such as name, work email and company); information about your business you choose to share (such as your 3PL and monthly spend); the documents you upload (such as contracts, invoices and data exports); and your communications with us. Uploaded documents are business records, but they can contain personal information, such as names, email addresses, phone numbers or shipping addresses of your staff, customers or suppliers.

Information collected automatically. When you use our website, our hosting infrastructure records technical data such as IP address, browser type, the pages you request and when. To prevent abuse, we store a one-way, keyed hash of your IP address with any check you submit, not the address itself.

Cookies. We don't use advertising or analytics cookies. Our staff admin area uses one strictly necessary session cookie. If this changes, we'll update this policy first.

Please don't upload sensitive personal information (such as government ID numbers, health information or payment card numbers). We don't need it.

2. How we use information

• To provide the free check and any services you request: reading your documents, comparing charges with your contract, showing your results, and reviewing documents by hand when our software can't read them reliably.
• To communicate with you about your results, services you ask about, and your requests. You can opt out of any marketing email at any time.
• To improve Overrate in general terms (for example, learning which invoice layouts our software struggles with) without using your documents for anything beyond serving you.
• For benchmarks, only if you opt in: your prices may be included in anonymized, aggregated benchmarks that don't identify you.
• To keep the Services secure, prevent abuse, enforce our Terms and comply with the law.

3. Artificial intelligence and automated processing

We use an AI service to read documents and extract information such as prices and invoice lines. Our current provider is Anthropic, PBC, which processes this data on our behalf under commercial terms that don't allow it to use your documents to train its models. Our own software then checks the extracted numbers against your documents and does all calculations. Results of the free check are preliminary, and a person reviews findings before any paid work or any dispute with your 3PL. We don't use automated processing to make decisions that have legal or similarly significant effects on individuals.

4. How we share information

We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We share information only:

• With service providers that help us run Overrate, such as hosting and infrastructure (for example, Railway, and Cloudflare for security and content delivery), document reading (Anthropic), email delivery for our internal notifications about new checks (Resend), and the email and communication tools we use to contact you. They may use it only to provide their services to us.
• For legal reasons, when required by law or legal process, or to protect the rights, property or safety of Overrate, our clients or others.
• In a business transfer, such as a merger, acquisition or sale of assets. The successor must protect your information in line with this policy.
• With your consent or at your direction.

5. How long we keep information

• Uploaded documents: deleted 30 days after you submit them, unless you become a client (then they're kept for the engagement and handled under our agreement with you), or sooner if you ask.
• Contact details and check results: kept until you ask us to delete them, and deleted after 24 months without contact, unless we need them longer for an ongoing engagement or to comply with the law.
• Server logs are kept by our hosting provider for a limited period. Backups may persist briefly before they're overwritten.

6. Security

We encrypt information in transit (HTTPS) and encrypt uploaded documents at rest. Access is limited to authorized people, and result pages use unguessable private links. No system is perfectly secure, but we work to protect your information, and if a security incident affects it, we'll notify you as the law requires.

7. Your choices and rights

You can ask us to access, correct, delete or give you a copy of your personal information, and you can opt out of marketing emails at any time. Email hello@getoverrate.com from the address you used with us. We'll confirm the request comes from you before acting on it, and respond within 45 days.

California residents. Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, you have the right to know what personal information we collect, use and disclose; to access, correct and delete it; to opt out of the sale or sharing of personal information (we don't sell or share it); to limit the use of sensitive personal information (we don't use it to infer characteristics about you); and not to be discriminated against for using these rights. You can use an authorized agent, and we may ask the agent for proof of authorization. The categories of personal information we collect are identifiers and contact details, commercial information contained in business records you upload, and internet activity data (server logs), used for the purposes and shared with the recipients described above.

Other US states. Residents of other states may have similar rights. Contact us and we'll honor them as the law requires.

Global Privacy Control. Because we don't sell or share personal information, there's nothing to opt out of. If that ever changes, we'll treat GPC signals as opt-out requests.

8. Children

Overrate is for businesses. We don't knowingly collect information from anyone under 16.

9. Where we process information

We're based in the United States, and we and our service providers process information in the United States.

10. Changes to this policy

We'll post any changes here with a new effective date. For material changes, we'll give reasonable notice, for example on this site or by email.

11. Contact

AURUM DAYS LLC. Email: hello@getoverrate.com.