Privacy Policy

Information used for your account

We collect your name, email address, phone number, job title and terms-acceptance record when you register. Your password is processed to create a password hash; the account database stores the hash rather than your plaintext password. Authentication records also include verification and recovery records, login sessions, IP addresses and browser information. If you update your profile, we also store the name or profile image URL you provide.

We store the business and venue information you provide, including venue addresses, type, capacity, timezone, operating hours, setup preferences and goals. Setup may include your POS provider choices, requested history, sensor identifiers and installation details, menu information, and manually entered staff names and job roles. These setup details do not mean a live POS or sensor connection is active.

When a venue owner invites a teammate, we receive the invitee's email address and intended access role from that owner, including before the invitee creates an account. We keep invitation and membership records, changes made by authorized users, account email delivery records, and technical and security records used to operate and protect the service. If you contact us, we receive the information you include in your message.

Why we use it

We use this information to verify and operate your account, maintain your saved setup, enforce venue permissions, invite authorized teammates, send account and security messages, prevent misuse, troubleshoot problems and respond to support requests. Providing a phone number during registration is not consent to promotional calls or texts.

Who receives it

Information is available to authorized users according to their workspace permissions and to authorized Nightro personnel when needed for operations or support. We use service providers to host the application, store data and deliver account email; the initial application hosting and transactional email use AWS in the United States. Email also passes through your and our email providers. We may disclose information when required by law or needed to protect the service or people from misuse.

The initial account service uses information for the purposes described here. This notice does not authorize advertising use, sale of account information or training an AI model on your account or venue data. Any proposed additional use must be reviewed and appropriately disclosed before it begins.

Cookies and browser choices

The account website uses essential cookies to keep you signed in and to remember a venue invitation while you register or sign in. Login sessions normally last up to seven days and may renew with use. The invitation cookie lasts up to one hour unless cleared earlier. Nightro staff access uses a separate, shorter session. Signing out ends your current login session; you can also remove cookies through your browser. Blocking essential cookies may prevent sign-in or invitation acceptance.

The account website does not use advertising or third-party analytics cookies. It does not track your browsing across unrelated websites for advertising. It does not change its essential account functions in response to a browser's Do Not Track signal. Our hosting and email providers still process the information necessary to deliver and secure the service.

Protection and retention

We use access restrictions, encrypted connections and password hashing to protect account information. No online service can guarantee complete security.

We retain account and workspace information while needed to provide the service, support authorized users, meet legal obligations and address security or dispute issues. Restricted backup copies and necessary security records may remain after a request is completed. Ask us about your information using the contact below; we will explain any information that must be retained and why.

Your requests

Contact team@nightrohq.com to ask about, correct or request deletion of your account information, or to request account closure. We will verify your identity and authority and handle applicable privacy rights under the laws that apply. For shared venue records, we also consider the business's authority and other authorized users. We will explain any limitation on the request.

Live POS transactions, imported staff records and live sensor counts require a separate review and authorization before ingestion, regardless of provider. This account policy alone does not establish permission to collect those records. Manually entered setup information is described above.

Changes to this policy

We will identify the version and effective date of published updates and provide notice of material changes before they apply. If a new use requires additional permission, we will request it before that use begins.