This policy explains what personal information Nightkeep collects, how it's used and shared, how long it's kept, and the choices you have. Nightkeep is operated by V.I.P. Solutions, LLC, a Florida limited liability company ("we," "us"). Questions: hello@nightkeep.app.
| Information | Details |
|---|---|
| Account details | Your name, email address, business name, and role. Your password is stored only as a one-way hash, so we can't read it. |
| Login security | Your second factors (an authenticator app secret, passkey public keys, and email codes), and your recovery codes, which are stored only as one-way hashes. Records of failed login attempts by email address, kept for about 15 minutes to stop password guessing. |
| Agreements and preferences | When you accepted the Terms and Conditions and which version, alert email addresses you set, and your light or dark mode choice. |
| Domains and results | The domains you add, their verification codes, and check results. These come from public information such as DNS records, domain registration data, and your website's certificate. |
| Connected accounts (Business and Complete plans) | If you connect Microsoft 365 or Google Workspace: your Microsoft tenant ID or the Google admin email you provide, and from your directory, your users' email addresses, whether each has set up MFA, who has administrator rights, guest accounts, last sign-in dates, suspended accounts, and Microsoft Secure Score. We never access email messages or files. |
| Billing | Payments are processed by Stripe. We receive and store your Stripe customer and subscription identifiers, plan, status, and renewal date. We never see or store your full card number. |
| Communications | The emails we send you (codes, alerts, invitations, monthly reports) and any messages you send us. |
| Technical data | Our hosting provider records standard server logs, such as IP addresses, browser type, and pages requested, which we use for security and troubleshooting. |
When you connect Microsoft 365 or Google Workspace, Nightkeep reads information about your organization's users so it can report on their security settings. We process that information on your behalf and only to provide the Service to you. You are responsible for having the authority to connect those accounts and for telling your team members as your policies or the law require.
We send service emails only. We don't send marketing email, and we don't use your information for advertising.
We do not sell personal information or share it for advertising. We share it only with service providers that help us run Nightkeep, under their own security and privacy commitments:
We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger, sale, or transfer of our business, in which case this policy continues to apply.
Every connection uses HTTPS. Every account must use two-factor authentication. Passwords, recovery codes, and the tokens in invitation and password reset links are stored only as one-way hashes. Connected accounts use read-only access, and we only accept a connection for a domain your organization has proven it owns. No system is perfectly secure, but we work to protect your information and will notify you as the law requires if a breach affects it.
Depending on where you live, including California and other U.S. states, the European Union, and the United Kingdom, you may have additional rights, such as to object to or restrict certain processing. Contact us and we'll help. We will not treat you differently for exercising your rights.
Nightkeep uses only the cookies needed to keep you signed in and secure, plus one that remembers your light or dark mode choice. See our Cookies Policy.
Nightkeep is a service for businesses and isn't intended for anyone under 18. We don't knowingly collect information from children.
Nightkeep is operated from and stores information in the United States. If you use it from elsewhere, your information will be transferred to the United States.
We'll post updates here and change the effective date. For material changes, we'll also let account owners know by email or in the Service.
V.I.P. Solutions, LLC, Florida, USA. Email hello@nightkeep.app.