Terms of Service
OVR Technology - Privacy Policy
Last Updated: September 9, 2026
1. Introduction
This Privacy Policy explains how OVR Tech, Inc., a Delaware corporation (“OVR,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you visit our website or online store, purchase or subscribe to our products, use OVR scent-delivery devices and Scentware, use our applications, Plugins, and Mods, request support, receive communications, or interact with OVR-operated community spaces. We refer to these collectively as the “Services.”
For purposes of the EU General Data Protection Regulation (“EU GDPR”) and UK data protection law, OVR Tech, Inc. acts as a controller for the personal information described in this Policy when OVR determines why and how that information is processed. Some third parties may act as OVR processors and others may act as independent controllers for their own activities.
2. Personal Information We Collect
|
Category |
Examples |
|
Purchase, subscription, and contact information |
Name, email address, shipping and billing address, order history, subscription plan and status, customer service identifiers, and related transaction records. You may purchase without creating an OVR Account. Full payment card details are handled by payment providers and are not stored by OVR. |
|
Commerce and payment account information |
OVR does not currently require an OVR product account, and no account is needed to set up, connect, or use a Device, Scentware, or the App. If you choose to create an account at checkout with OVR’s e-commerce and payment provider in order to store a payment method, manage a subscription, or view order history, OVR processes the information associated with that account, such as contact details, saved shipping and billing addresses, order and subscription history, communication preferences, and account credentials or authentication identifiers. Full payment card details remain with the payment provider. |
|
Website and online store activity |
Depending on the technologies enabled, IP address, browser and device type, pages and features viewed, referring pages, checkout and conversion events, cookie or similar identifiers, and cookie-consent choices. |
|
Device and firmware information |
Device identifier, firmware version, installed scent pack, connection type and status, hardware or diagnostic information, and limited preferences stored on or associated with the Device. |
|
General location |
Approximate region-level location inferred from IP address or from a shipping or billing address. OVR does not collect precise GPS or fine-grained geolocation from the Device or App unless a future feature separately discloses and requests permission for it. |
|
App usage and diagnostics |
Usage, onboarding, connection, device health, firmware, scent playback, and settings events as described in Section 4. |
|
Support communications |
Messages you send OVR and information you provide to diagnose a problem or process a request. You should avoid providing sensitive information that is not necessary for support. |
|
Community activity |
Usernames, posts, and other information you make available in OVR community spaces, subject also to the platform provider’s privacy practices. |
|
Marketing preferences |
Newsletter subscription status, communication preferences, campaign engagement, and records needed to honor opt-outs. |
3. General Location
OVR uses approximate, region-level location information for purposes such as shipping, tax calculation, fraud prevention, regional product support, regulatory compliance, and understanding the geographic distribution of product use. Neither the Device nor the App is designed to collect precise GPS or fine-grained geolocation for the current Services.
4. App Usage and Diagnostic Analytics
The OVR App collects usage and diagnostic events to help OVR understand how the product is set up, connected, and used and where failures occur. Unity Technologies may process App analytics on OVR’s behalf as a service provider or processor under applicable terms and data-protection arrangements.
|
Category |
What is collected |
Why |
|
Automatic event context |
Randomly generated session ID generated when the App opens; App version and build; operating system; screen area in use; connection type (such as Bluetooth, USB, or WebSocket); connection state; Device firmware version; scent pack name; onboarding completion status. |
Context for analytics events. |
|
App usage |
App launches, session start and end, session duration, and scenes or areas loaded. |
Understand usage patterns and stability. |
|
Onboarding |
Setup step reached, connection method selected, and whether requested Bluetooth or notification permissions were granted, denied, or skipped. |
Identify setup failures and improve onboarding. |
|
Device connection |
Connection attempts and outcomes, pairing failures and reasons, auto-connect failures, reconnection attempts, disconnections and reasons, and Device readiness changes. |
Diagnose connectivity and reliability issues. |
|
Device health |
Battery level reported as a range, hardware error codes, cassette insertion and removal, channel depletion, and cassette age or freshness reported as a range. |
Product reliability, maintenance, and support. |
|
Firmware updates |
Update checks and results, current and available versions, user choice at update prompts, and download or installation outcomes. |
Manage firmware rollout and troubleshoot updates. |
|
Scent playback |
Which scent or channel played, intensity reported as a range, playback success or failure, failure reasons, scent-detail views, and mute state. |
Understand product use and scent preferences. |
|
Settings changes |
The setting changed and its previous and new values, such as connection, notification, LED, sleep timer, calibration, appearance, and developer-mode settings. |
Understand feature use and diagnose configuration issues. |
4.1 Data minimization measures
OVR deliberately coarsens certain analytics before transmission. Battery level, scent intensity, and cassette age may be reported as ranges rather than exact values. Certain hardware error or depletion events may be limited to reduce repetition. The analytics session identifier is randomly generated and changes when a new App session begins.
4.2 Your choice about App analytics
The App setting for optional analytics is labeled “Share Usage and Diagnostic Data” or substantially similar language. Turning optional analytics off does not prevent ordinary use of the Device or App, except that OVR may still process information that is strictly necessary to provide requested functionality, maintain security, complete an update, or respond to a support request.
For users in the European Economic Area (“EEA”) and United Kingdom, optional non-essential App analytics are disabled until the user provides affirmative consent. In other regions, optional analytics may be enabled by default where permitted by law and may be turned off at any time through the App. A user who is under the age at which local law permits independent consent should not enable consent-based analytics without any parental or guardian authorization required by local law.
4.3 Separation from directly identifying data
OVR currently does not intentionally link App analytics described above to directly identifying purchase information such as a purchaser’s name, email address, or order history. If OVR materially changes this practice, OVR will update this Policy, provide notice, and obtain consent where required by law.
OVR maintains an internal review process intended to keep this analytics description aligned with material changes to the App’s analytics implementation.
5. Cookie Policy
This Section is OVR’s cookie policy. It explains the cookies and similar technologies used on OVR’s website and online store, why they are used, and how to control them. It applies to OVR’s website and online store. It does not apply to the OVR App, whose analytics are described in Section 4, and it does not apply to third-party websites or platforms that have their own policies.
5.1 What cookies and similar technologies are
A cookie is a small text file placed on your device by a website you visit. Cookies allow a site to recognize your browser, remember your choices between pages and visits, and measure how the site is used.
OVR uses the term “cookies and similar technologies” to include pixels, tags, and web beacons, which are small pieces of code that record that a page was loaded or an email was opened; local storage and session storage, which store information in your browser; and software development kits and scripts supplied by service providers. This Section applies to all of them.
5.2 Categories of cookies and similar technologies we use
|
Category |
What it does |
Examples of use |
Basis |
|
Strictly necessary |
Enables core site functions that cannot be turned off without breaking the site. |
Security and bot protection, load balancing, keeping items in your shopping cart, completing checkout, fraud prevention, and remembering your cookie choices. |
Necessary for a service you request; consent is not required. |
|
Functional and preference |
Remembers choices you make so the site behaves the way you expect. |
Region, language, and currency selection, previously viewed products, saved form entries, and interface preferences. |
Consent where required by local law; otherwise legitimate interests. |
|
Analytics and performance |
Helps OVR understand how the site and store are used and where they fail. |
Pages and features viewed, referring pages, session duration, checkout and conversion steps, error and performance measurement, and aggregate reporting. |
Consent where required by local law, including in the EEA and UK; opt-out where U.S. state law provides one. |
|
Marketing, advertising, and attribution |
Measures campaigns and, where enabled, supports advertising. |
Measuring which campaign or referral led to a visit or order, limiting repeat ad delivery, and audience or retargeting technologies where OVR enables them. |
Consent where required by local law, including in the EEA and UK; opt-out where U.S. state law provides one. |
OVR enables only the technologies it needs at a given time, and the specific tools may change as OVR’s systems develop. Where a change introduces a new category or a materially different purpose, OVR will update this Section and refresh consent where required.
5.3 First-party and third-party cookies
First-party cookies are set by OVR’s own site. Third-party cookies are set by providers OVR uses, and those providers may receive information about your visit under their own privacy notices.
Providers whose technologies may be present include OVR’s e-commerce and store platform, payment and fraud-prevention processors, website analytics providers, email and marketing platforms, and, where OVR enables them, advertising and attribution partners. The categories of recipients described in Section 7 apply to information collected through these technologies.
5.4 How long cookies last
Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a set period or until you delete them, and their lifespan varies by purpose.
As a general guide, strictly necessary and checkout cookies are session-based or short-lived, preference cookies typically last up to twelve (12) months, analytics cookies typically last between a few days and twenty-six (26) months, and marketing and attribution cookies typically last up to twelve (12) months. Records of your consent choices are retained as needed to demonstrate and honor those choices, commonly for up to twelve (12) months, after which OVR may ask again.
5.5 Your choices
If you are in the EEA or UK, OVR will present a consent banner before setting non-essential cookies and will not set them unless you agree. Rejecting is as easy as accepting, and you may change or withdraw your choice at any time through the cookie preferences control available on the website.
If you are in a U.S. state whose privacy law provides an opt-out right for targeted advertising or the sale or sharing of personal information, OVR will make the required opt-out available through the website, which may appear as a “Cookie Preferences” or “Do Not Sell or Share My Personal Information” control.
Where required by applicable law, OVR treats a Global Privacy Control or similar browser or device opt-out preference signal as a valid opt-out request for the browser or device that sends it.
You can also control cookies through your browser settings, including blocking or deleting cookies and using private browsing. Browser controls are specific to each browser and device, so you would need to set them everywhere you browse.
Blocking strictly necessary cookies may prevent parts of the site from working, including adding items to a cart and completing checkout. Deleting cookies also deletes the record of your privacy choices, so you may be asked again.
5.6 Do Not Track
There is no common industry standard for how websites should respond to browser “Do Not Track” signals, and OVR does not currently respond to them. OVR does honor Global Privacy Control and similar opt-out preference signals where applicable law requires it, as described above.
5.7 Changes to this cookie policy
OVR may update this Section as the tools it uses change. OVR will update the “Last Updated” date at the top of this Policy and, where a change requires it, will request renewed consent before the new technology is used.
6. How We Use Personal Information and Legal Bases
OVR uses personal information for the purposes below. Where the EU GDPR or UK GDPR applies, OVR relies on the legal bases described below as appropriate to the processing activity.
|
Purpose |
Information used |
Legal basis where GDPR applies |
|
Process purchases, subscriptions, shipping, returns, and warranty claims |
Purchase, contact, subscription, transaction, and Device information |
Performance of a contract; legal obligations |
|
Provide the Services and customer support |
Contact, support, Device, firmware, and diagnostic information |
Performance of a contract; legitimate interests |
|
Maintain security, prevent fraud, and protect OVR and users |
Purchase, website, general location, Device, account, and security information |
Legitimate interests; legal obligations |
|
Diagnose faults and improve product reliability |
Usage and diagnostic analytics, Device and firmware information |
Consent where required; otherwise legitimate interests |
|
Understand product usage and develop features |
Analytics, scent usage, feature and settings information |
Consent where required; otherwise legitimate interests |
|
Operate and measure the website and online store |
Website activity, cookie choices, purchase funnel and device information |
Contract/legitimate interests for necessary functions; consent where required for non-essential analytics |
|
Send marketing communications |
Contact details, preferences, and campaign engagement |
Consent where required; otherwise legitimate interests where permitted, with the right to opt out |
|
Meet tax, accounting, product-safety, regulatory, and legal obligations |
Purchase, warranty, support, Device, and compliance records |
Legal obligation; legitimate interests |
Where OVR relies on legitimate interests, OVR considers the relevant business need, necessity of the processing, and effects on individual privacy rights. You may object to certain legitimate-interest processing as described in Section 11.
7. How We Share Personal Information
OVR does not sell personal information for money. OVR may disclose personal information to service providers, processors, business partners, and independent controllers as needed for the purposes described below. The exact providers may change as OVR’s systems develop.
|
Recipient category |
Purpose |
|
Unity Technologies and similar analytics providers |
Process and report App analytics and diagnostics on OVR’s behalf, subject to applicable data-protection terms. |
|
Shopify and e-commerce providers |
Operate the online store, checkout, customer and order functions, subscriptions, and related commerce services. Depending on the service and activity, a provider may process information on OVR’s behalf or for its own disclosed purposes. |
|
Payment processors |
Process payments, prevent fraud, and handle payment-related obligations. OVR does not store full payment-card details. |
|
Shipping, fulfillment, and logistics providers |
Deliver products, provide tracking, manage returns, and support product delivery. |
|
Email, marketing, and communications providers |
Send transactional, service, subscription-reminder, and marketing communications and measure delivery or engagement where permitted. |
|
Customer support and business systems |
Manage support requests, warranty claims, communications, records, and business operations. |
|
Discord and other community platforms |
Host community spaces. These platforms generally operate under their own privacy policies and may be independent controllers of information provided to them. |
|
Professional advisors, insurers, regulators, and authorities |
Comply with law, respond to lawful requests, manage insurance or legal matters, enforce rights, and protect safety and security. |
|
Corporate transaction counterparties |
Evaluate or complete a financing, merger, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal requirements. |
Certain analytics or advertising technologies can be treated as a “sale” or “sharing” of personal information under some U.S. state laws even when no money is exchanged for the information. If OVR activates technologies that trigger those definitions, OVR will provide required notice and opt-out choices.
8. Plugins, Mods, and Third-Party Platforms
OVR Plugins are embedded in third-party development environments and content. A Plugin may operate without sending personal information directly to OVR. When a Plugin, Mod, or third-party experience communicates with the OVR App or Device, information processed by the App is governed by this Policy. Third-party game engines, marketplaces, games, mod platforms, and other services collect and use information under their own privacy notices.
9. International Data Transfers
OVR is established in the United States. Personal information may be processed in the United States and in other countries where OVR or its service providers operate. Privacy and data-protection laws in those countries may differ from the laws where you live.
Where applicable law requires safeguards for an international transfer, OVR will use an approved transfer mechanism or other lawful safeguard, which may include the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or other UK-approved mechanisms, adequacy decisions, or another mechanism permitted by applicable law.
10. Data Retention
|
Category |
Retention approach |
|
Purchase, order, tax, and transaction records |
For the period required by applicable tax, accounting, warranty, consumer-protection, and other legal requirements; business records are commonly retained for several years. |
|
Commerce and payment account information |
While the account is active and for a reasonable period after closure as needed for security, disputes, legal obligations, and recordkeeping. |
|
App usage and diagnostic analytics |
According to OVR’s and its analytics provider’s configured retention settings and only for as long as reasonably needed for analytics, product reliability, security, and support purposes. |
|
Website and cookie data |
For periods appropriate to the relevant cookie or technology and OVR’s business purpose, subject to consent and legal requirements. |
|
Support and warranty communications |
For as long as reasonably needed to resolve the matter, provide service, establish a service history, and meet legal or business-record requirements. |
|
Marketing records and preferences |
Until you opt out or OVR no longer needs the information, plus a limited suppression record to honor opt-outs. |
OVR deletes, de-identifies, or restricts personal information when it is no longer reasonably needed, unless longer retention is required or permitted by law.
11. Your Privacy Rights
11.1 EEA and UK rights
If the EU GDPR or UK GDPR applies to your personal information, you may have rights to access, correct, erase, restrict, or receive certain personal information; object to processing based on legitimate interests; withdraw consent where processing relies on consent; and lodge a complaint with a competent supervisory authority. These rights are subject to legal conditions and exceptions.
11.2 U.S. state privacy rights
Depending on where you live and whether the applicable law applies to OVR, you may have rights to know or access personal information, request deletion or correction, obtain a portable copy, opt out of certain sales, sharing, targeted advertising, or profiling, and appeal certain privacy-request decisions. OVR will not discriminate against you for exercising a legally protected privacy right.
OVR does not sell personal information for money. If OVR engages in activity treated as a sale or sharing under applicable law, OVR will provide the required opt-out mechanism. OVR does not intentionally request sensitive personal information unless needed for a specific service or legal purpose. If you voluntarily provide health-related or other sensitive information in a support request, OVR will use it only as reasonably necessary for the request or as otherwise permitted by law.
11.3 Exercising your rights
To submit a privacy request, contact privacy@ovrtechnology.com or use any privacy-request tools OVR makes available. OVR may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law. OVR will respond within the time required by applicable law.
12. Children and Teen Users
The Device, Scentware, and App are not intended for use by children under thirteen (13). OVR does not knowingly collect personal information online from children under thirteen in connection with the Services. If OVR learns that it has collected personal information from a child under thirteen in circumstances where collection is not permitted, OVR will take appropriate steps to delete or otherwise address the information.
Users between thirteen (13) and seventeen (17) may use the Device, Scentware, and App only with the consent and supervision of a parent or legal guardian under the Terms of Service. Parents and guardians should review this Policy and manage optional analytics and other privacy choices with the teen user. Where local law requires parental authorization for consent-based processing by a minor, that authorization must be obtained before the optional processing is enabled.
If you believe a child under thirteen has provided personal information to OVR, contact privacy@ovrtechnology.com.
13. Security
OVR uses administrative, technical, and physical safeguards designed to protect personal information based on the nature of the data and processing. Measures may include encryption in transit, access controls, account and system security measures, data minimization, vendor review, and internal access restrictions. No security measure can guarantee absolute security.
14. Community Spaces
OVR community spaces, including Discord, may be hosted by third parties under their own privacy policies and terms. Content posted in public channels is visible to other users and may be copied, quoted, indexed, or retained by others. Do not post information you want to keep confidential or private.
15. Future AI-Assisted Features
OVR may in the future offer AI-assisted, camera-based, screen-analysis, or visual-recognition features that can identify content and trigger scent experiences. These features are not part of the current App analytics described in Section 4 unless OVR expressly states otherwise.
Before any feature that materially changes OVR’s collection or processing of visual, camera, screen, biometric, or similar data is enabled, OVR will provide an appropriate privacy notice or addendum describing the data involved, whether processing is local or remote, retention, recipients, and user choices. OVR will request separate affirmative consent where required by applicable law and will not treat acceptance of this Policy alone as consent to a future feature that requires separate consent.
16. Changes to This Policy
OVR may update this Policy as products, vendors, laws, and business practices change. OVR will update the “Last Updated” date and provide additional notice of material changes where required or appropriate, such as through the App, email, or a prominent website notice. If applicable law requires consent for a material change, OVR will obtain it before the new processing begins.
17. Regional Representatives
OVR is currently established in the United States. Before OVR actively offers Services to individuals in the EEA or UK in circumstances where applicable law requires appointment of a local representative, OVR will appoint the required representative and publish the representative’s contact information in this Policy or at a linked privacy page.
EEA Representative: [TO BE APPOINTED
UK Representative: [TO BE APPOINTED
18. Contact Us
OVR Tech, Inc.
50 Lakeside Ave, Suite 750
Burlington, VT 05401
General support: support@ovrtechnology.com
Legal: legal@ovrtechnology.com
Privacy: privacy@ovrtechnology.com