Short version: we collect what is needed to quote your job, run your account and keep your site online. We do not sell it, and we do not run advertising or analytics trackers on this site.
What we collect
- Account details - your name, business name and email address, plus a hashed version of your password. We never store the password itself.
- Job details - quotes, orders, requests and any notes you send us.
- Payment records - the amount, date and status of payments. Card numbers never reach this site; they go directly to Stripe.
- A session cookie - a signed token that keeps you signed in. It is strictly necessary, so there is no cookie banner to click.
- Server logs - standard request logs held by Cloudflare for security and debugging.
Why we hold it
To quote and deliver the work, take payment, keep your site running, and meet our tax and accounting obligations. That is the whole list.
Who else sees it
Only the services needed to run the business:
- Stripe - payments, subscriptions and invoices.
- Cloudflare - hosting, the database and site delivery.
- Resend - sending the emails this site generates.
- A domain registrar - where your domain is registered in your name.
We do not sell your data, share it for advertising, or pass it to anyone else unless the law requires it.
How long we keep it
Account and job records are kept while you are a client and for 7 years afterwards, which is the retention period for financial records. Session tokens expire on their own. You can ask us to delete anything not required for tax purposes.
Your choices
Email support@nightshiftweb.dev to get a copy of what we hold, correct it, or have it deleted. We respond within 30 days. You can change your own password and email preferences from your dashboard at any time.
Children
This service is for businesses. It is not directed at anyone under 16 and we do not knowingly collect their data.
Security
Passwords are hashed, session tokens are signed and stored only as hashes, and the site is served over HTTPS. No system is perfect - if we ever discover a breach affecting your data, we will tell you.
Changes
If this policy changes materially we will email active clients. The date at the top shows the current version.