Privacy

Who we are

Overmountain AI is a trading name of Mountain Strategy LLC, a company registered in North Carolina, United States. We provide a chat assistant that our clients install on their own websites.

This notice covers two different situations. When you use the assistant on this site, we are the controller of what you type. When you use it on a client's site, that business is the controller and we process the conversation on their behalf; their own privacy notice governs it, and requests about that data are best made to them, though we will always help.

What the assistant stores

When someone has a conversation with the assistant, we store:

• The messages both sides sent, in full.
• The page the visitor was on when they opened it, and the page that referred them.
• The browser's user-agent string.
• A random session identifier, generated in the browser so that a conversation holds together across messages.

If a visitor asks to be contacted, we also store what they typed into that form: their name, an email address or phone number, their message, and the page they were on.

What we do not store

• No IP addresses. The visitor's address is used to rate-limit the request as it arrives and is never written to our database.
• No cookies. The session identifier is kept in the browser's sessionStorage, which is cleared when the tab closes and is not readable by any other site. The assistant sets nothing that follows anyone off the page.
• No advertising identifiers, no profile built from behaviour, and nothing sold or shared with an ad network.
• Nothing from the rest of the page. The assistant reads only what is typed into it, plus the address of the page it is on.

This website

Everything above is about the assistant. This website — the pages you are reading now — also uses Google Analytics to count visits and see which pages people find useful. That is a separate thing and it works differently, so it is worth being plain about:

• It does set cookies in your browser, and it collects your approximate location, device and browser, the pages you visit here and where you arrived from.
• We use it to decide what to write next, and for nothing else. We do not run advertising, we do not build audiences, and we have not enabled Google's advertising features.
• It runs on this site only. It is not part of the assistant and it is never installed on a client's website — the widget a client pays for carries no analytics of ours at all.
• Browser “do not track” settings, ad blockers and Google's own opt-out add-on all stop it, and nothing on this site breaks when they do.

Why we store it

To answer the question, to pass the enquiry to the business, and to improve the answers. The last one is the substance of what our clients pay for: we read the questions the assistant could not answer and write the answers, so the next person who asks gets a real reply. That work is done by people reading transcripts.

We do not sell personal information, and we do not use conversations to train any AI model.

How long we keep it

Conversations are deleted on a schedule each client sets, ninety days by default, measured from the last message rather than the first. Enquiry records are kept until the business asks us to remove them, because they are that business's record of a customer rather than chat history — but an erasure request from the person themselves removes those too.

Who else processes it

We use a small number of vendors to run the service. Each processes only what it needs to:

• Anthropic — generates the assistant's replies. Conversations sent through the API are not used to train models.
• Voyage AI (MongoDB) — turns questions and website text into the numerical form used to find relevant material.
• Upstash — holds client configuration, session state and the searchable index of each client's website content.
• Neon — the database holding conversations and enquiries.
• Resend — delivers enquiry emails to the business.
• Vercel — hosts the application and serves this website.
• Google Analytics — counts visits to this website only, as described above. It sees nothing from the assistant or from a client's site.

Your rights

You can ask what we hold about you, ask for a copy of it, and ask us to delete it. We can find records by the email address you gave or by the session identifier shown in a conversation, and we can produce a complete export or erase everything. Ask through the contact form on this site.

Depending on where you live you may have further rights — to correct inaccurate information, to object to processing, or to complain to a supervisory authority. We will honour them.

Children

The service is sold to businesses and is not directed at children. We do not knowingly collect information from anyone under 13, and we delete it if we find it.

Changes

If we change what we collect or who processes it, we will update this page and the date at the top of it.