Privacy

Last updated: 24 September 2026

Nightshift is in early access. This page explains, in plain language, what data this website collects, why, and what you can do about it. If anything here is unclear, email luca.cotelea25@gmail.com.

Who is responsible

Nightshift is responsible for the data described here. You can reach us at luca.cotelea25@gmail.com.

What we collect

• Your account. When you create an account we store your email address and a securely hashed version of your password (we never see or store the password itself). A cookie keeps you signed in; it is only used for that.
• Your business details. The business name, services, prices, hours, address and notes you enter, so your assistant can answer with them.
• Test chats. Messages you send to your own assistant in the dashboard are sent to our AI provider to generate a reply. They are not stored.
• Waitlist. When you join the waitlist we store your email address, which form you used, and the time you signed up.
• Demo conversations. Messages you type into the live demo are sent to our AI provider to generate a reply. If the demo detects a booking or a complaint, the booked time and the message containing contact details are stored so the demo calendar can show that slot as taken. Please don't type real personal details into the demo.

To stop abuse, we count how many messages and sign-ups come from each visitor per hour. We only keep a one-way hash of your IP address for this, and only for the current hour.

Apart from the sign-in cookie above, this site does not use cookies, analytics or advertising trackers. Fonts are served from our own server, not from third parties.

Why we use it

• Account and business details: to provide the service you signed up for (performing our contract with you).
• Waitlist emails and "first in line" requests: to tell you when your early-access spot opens and share launch details. We only do this because you asked us to, and you can withdraw that consent at any time.
• Demo data: to run the live demo, which is in our legitimate interest in showing how the product works.

Who else processes it

• Cloudflare hosts this website and stores account, business, waitlist and demo data.
• Groq processes demo and test messages to generate AI replies.

These providers may process data outside the European Economic Area, in which case they rely on the safeguards required by law, such as standard contractual clauses. We never sell your data.

How long we keep it

Your account and business details are kept until you delete your account, which you can do yourself at any time in Settings; everything is deleted immediately. Waitlist emails are kept until you unsubscribe or ask us to delete them, or until early access ends and you choose not to continue. Demo data is kept only as long as the demo needs it and is deleted on request.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing luca.cotelea25@gmail.com. If you're in the EU and unhappy with how we handled your request, you can complain to your local data protection authority (in Romania, that's ANSPDCP).

Changes

If this policy changes, we'll update the date at the top of this page. If a change affects how we use your email, we'll tell you directly.