Privacy Policy

1. Who We Are

NightlySite (“we,” “us,” or “our”) operates the website at nightlysite.com and the hosted website service described therein. Questions about this policy can be directed to [email protected].

2. Information We Collect

Information you provide directly

• Account registration data: your name, email address, and password (stored as a one-way hash — we never store your plain-text password).
• Business information: Google Place ID and any details you enter during onboarding.
• Communications: messages or feature requests you send us.

Information collected automatically

• Usage data such as pages visited, clicks, and session duration, collected via Google Analytics.
• Standard server logs including IP address, browser type, and referring URL.

Information from third parties

• Google Places API — We retrieve your business name, address, phone number, hours, photos, and reviews from your Google Business Profile to populate your NightlySite website. This data is governed by Google's Privacy Policy.
• Stripe — Payment processing is handled entirely by Stripe. We do not store card numbers or banking information. Stripe's data practices are described in Stripe's Privacy Policy.

3. How We Use Your Information

• To create and manage your account and hosted website.
• To sync your Google Business Profile data nightly and keep your site current.
• To process payments and send billing-related emails.
• To send transactional notifications (e.g., when your site goes live).
• To respond to support inquiries and feature requests.
• To improve the service through aggregate, anonymized analytics.

We do not sell your personal information to third parties. We do not use your data for advertising targeting.

4. Cookies

We use a single first-party authentication cookie (nightlysite-token) to keep you logged in. It is an HTTP-only, secure cookie that contains a signed JWT — it does not track you across other websites.

Google Analytics sets its own cookies to measure site usage. You can opt out via Google's opt-out browser add-on.

5. Data Storage and Security

Your data is stored in an encrypted PostgreSQL database hosted on Amazon Web Services (AWS RDS) in the United States. Your website files are served from Amazon S3 and CloudFront. We use industry-standard measures including TLS in transit and encryption at rest, but no system is perfectly secure.

6. Data Retention

We retain account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records).

7. Your Rights

Depending on your jurisdiction you may have the right to access, correct, or delete the personal data we hold about you. To make such a request, email us at [email protected] from the address associated with your account.

8. Children

NightlySite is intended for business owners and is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of any material changes and update the effective date above.

10. Contact

For privacy-related inquiries: [email protected]