Privacy

Over the Fence (overthefence.io) is run by DENVOD SOLUTIONS. It reads the public websites of a business and its competitors, and reports what changed.

Questions about your data go to privacy@overthefence.io.

Your email. It is your login. We send the sign-in link to it, and account and billing emails. If you joined the waitlist before we opened, we keep the address to tell you we’re open.

The sites you name. Your own site and the competitors you choose, with the plan they are watched on.

Company details, if you add them. Company name, address and tax ID, for invoices.

Payment. Stripe takes your card. We never see the full number. We keep the plan, the price, the card brand, its last four digits and its expiration date, so the Subscription page can show them.

How the site is used. PostHog records page views and clicks in the product, and can replay a visit. Fields you type into are masked in replays. Once you sign in, these events are linked to your account.

Our ads. On the home page and the sign-up steps, the Meta Pixel tells Meta which visits came from our ads on Facebook and Instagram, and which reached each step. When a free trial starts or the first payment is taken, we tell Meta too, with your email hashed so it can’t be read, and the browser and address you paid from, so Meta can match it to the ad. The dashboard and sign-in pages don’t load it.

Feedback. When we ask how likely you are to recommend us, and in Account’s Help box, PostHog records your score and what you type as you write it, even if you don’t send it, so we can see what’s bothering people. What you send is also kept with your account, so we can reply. Each box says this beneath it.

We read the public pages of the sites you name, through DataForSEO. We follow each site’s robots.txt. If a site blocks us, we stop and say so.

The text of those public pages goes to an AI model, which sorts them into kinds of page: products, case studies, news and so on. Nothing about you or your account goes with it.

The sign-up and sign-in pages use Cloudflare Turnstile to check that a person, not a script, is asking. It runs without anything to click. To do it, Cloudflare reads signals from your browser and connection.

Cloudflare’s handling of that data is covered by its Turnstile Privacy Addendum.

Cloudflare runs the site and the API, sends our email and runs Turnstile.

Supabase holds the database and makes the sign-in links. Its servers are in Singapore.

Stripe takes payments and keeps the invoices.

PostHog records how the site is used, in the United States.

Meta measures our ads on Facebook and Instagram, in the United States.

DataForSEO fetches the public pages of the sites you name. It receives those addresses, not your details.

OpenRouter, in the United States, passes two things to the models that do our reading: the questions you ask on Ask, with the figures they’re about, to the model that answers; and the text of the public pages we read to TypeSafe’s Jev, which sorts them by kind. Neither receives your email, your name or your payment details.

We don’t sell your data.

We store your sign-in session, the plan you chose and, after you pay, the payment’s reference, so a different login email on the same browser can claim it. Logging out removes the payment reference. PostHog keeps its own identifier in your browser, and the Meta Pixel keeps Meta’s (and, if you came from one of our ads, which ad).

You can change your company details on the Account page. To get a copy of what we hold, correct your email or have your account deleted, write to privacy@overthefence.io. We reply within 30 days. Stripe keeps payment records for as long as the law requires.

When this page changes, the date at the top changes. If a change affects how we use your data, we email you first.