Privacy Policy.

Effective September 11, 2026

NightShiftAgents LLC, a Georgia limited liability company based in Decatur, Georgia (“NightShiftAgents,” “we,” “us,” or “our”), provides this Privacy Policy for our website, install-plan intake, customer portal, support, and related services. It explains how we handle information about business contacts, customers, authorized users, and website visitors. It does not cover a third party’s own practices.

The short version

The agents are designed to run on a computer you control, using accounts you authorize. We do not routinely copy entire inboxes, customer lists, books, or connected drives into our systems. We do receive the account, configuration, operational, support, and file information described below to provide the website, portal, installation, and ongoing service.

What this website collects

• Intake answers. What you type into the install-plan questions: business name, industry, what you sell, where your work lives, contact details. We use it to write your install plan and, if you become a customer, your company file.
• Contact details. Email and, if you give it, phone. Used to send your plan, book the install call, and send approval cards and briefs once you are a customer.
• Basic visit data. Pages viewed, referrer and campaign parameters, so we know which pages people read, plus a random browser identifier stored locally. We do not use third-party advertising pixels or cross-site behavioral advertising.
• Billing. Handled by a payment processor. We see the last four digits of a card and the invoice history. We never see or store full card numbers.
• Account and communications data. Sign-in email, authentication events, support messages, booking details, consent records, and emails needed to administer your account.
• Operational data and files. Agent configuration, status, logs, approval decisions, support notes, produced files you choose to make available in the portal, and setup-kit versions.
• AI-assisted intake. If you choose “improve answer with AI,” the answer you selected and limited question context are sent through Lovable’s AI service to OpenAI to suggest a revision. You can edit, accept, dismiss, or undo the suggestion. Do not include sensitive personal information that is unnecessary for your install plan.
• Device and security data. Browser type, approximate network information, timestamps, diagnostics, and security events generated when you use the website or portal.

What normally remains on your machine

• Your email, calendar and drafts.
• Your customer and lead lists.
• Your ledger, bank and processor transactions.
• Files the agents produce unless you or the installed service uploads a file for portal access, support, or delivery.

The agents read these in place to do their work. When an agent needs a language model to draft text, it sends context needed for that task to the configured model provider and receives output back. Depending on the task and your configuration, that context may contain business or personal information. Do not connect data you lack authority to process.

What we do receive from your installation

• Run logs. Which agent ran, when, whether it succeeded, and an error message if it failed. These power the portal and let us tell you plainly when something broke.
• Approval requests and your answers. The six lines of each card and whether you approved, declined, or asked a question. This is the decision log.
• Your company file. Prices, rules, voice, limits, and operating instructions. Stored so the portal can show and edit it. It is configuration, not customer data.

Why we use information

• Provide, configure, secure, maintain, and improve the service.
• Generate install plans, operate requested agents, deliver files, and show account activity.
• Authenticate users, prevent fraud and abuse, troubleshoot failures, and protect systems.
• Process payments, administer subscriptions, book calls, and send service communications.
• Answer support and legal requests, enforce agreements, and comply with law.
• Analyze aggregate product use and measure which pages or campaigns lead to an intake.

How we disclose information

We disclose information only as reasonably needed:

• Service providers. Hosting, database, storage, email, calendar, payment, analytics, support, security, and AI providers acting for us.
• Your direction. Connected services, recipients, or collaborators you authorize.
• Legal and safety. When reasonably necessary to comply with law, protect rights and safety, investigate abuse, or enforce agreements.
• Business transfers. In a financing, merger, acquisition, reorganization, or sale, subject to appropriate confidentiality protections.

We do not sell personal information or share it for cross-context behavioral advertising.

Service providers

Our current providers include Lovable for application and managed email infrastructure, Supabase for database, authentication, and storage services, Stripe for payment processing, Google for calendar booking, and OpenAI through Lovable’s AI service for optional AI-assisted intake and configured agent tasks. Providers process information under their own privacy terms and our arrangements with them. We may replace or add providers as the service changes while requiring appropriate data protection.

Who can access information

Access within NightShiftAgents LLC is limited to authorized personnel and contractors who need the information for installation, support, account administration, security, billing, or legal compliance. Contact-form messages are stored with the service and forwarded to a monitored business inbox so a person can respond.

What we do not do

• We do not sell or rent any of this.
• We do not use your data to train models.
• We do not use customer content to train public or shared AI models.
• We do not knowingly collect information from children under 13, and the service is not directed to children.

Cookies and local storage

We use storage required for sign-in, security, session continuity, saved intake progress, and basic first-party attribution. These technologies are needed to operate and understand the service. We do not currently use advertising cookies. Browser controls can clear stored information, but blocking essential storage may prevent sign-in or saved progress from working.

If you accept the cookie banner, we also record anonymous usage measurements on our public pages — clicks, scroll depth, and time on page — tied to a random session ID, never to your name, email, or anything you type into a form. Declining the banner means none of this is recorded.

How long we keep it

We keep information only as long as reasonably needed for the purposes above. This usually means up to twelve months for intake answers that do not become a customer account, and the life of the account plus a reasonable wind-down period for run and decision logs. Billing and transaction records may be kept longer for tax, accounting, fraud prevention, and legal obligations. Backups and security logs may persist for a limited period after deletion. We may retain information needed to establish, exercise, or defend legal claims.

Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle, including access restrictions and protected storage. No system is completely secure, and we cannot guarantee absolute security. You are responsible for securing your devices, accounts, and authorized-user access and for promptly reporting suspected misuse.

Your choices

• Revoke any connection the agents use by signing out or changing the password. The agent stops.
• Ask us what we hold about you, and we will send it.
• Ask us to correct or delete it, subject to legal exceptions and verification.
• Ask for a portable copy of information you provided where applicable.
• Opt out of nonessential email using the unsubscribe link. Account, security, and sign-in messages may still be required.

Depending on where you live, law may provide additional rights to access, correct, delete, obtain, or restrict certain uses of personal information, and to appeal a denied request. Submit a request through the contact page. We will verify the request and respond within the time required by applicable law. An authorized agent may submit a request where local law permits. We will not discriminate against you for exercising a privacy right. Because we do not sell personal information or use it for targeted advertising, there is no sale or targeted-advertising opt-out required for our current practices.

Business data and other people

Customers control the business data they connect to the service. If you provide information about employees, customers, leads, or other people, you are responsible for having a lawful basis and giving required notices. We process that information to provide the service under your instructions, except when we use it for our own security, billing, legal compliance, or service administration purposes.

Where information is processed

We and our providers may process information in the United States and other countries where they operate. Those places may have different privacy laws. Where required, we use appropriate contractual or legal safeguards for cross-border transfers.

Changes to this policy

We may update this policy as the service or law changes. We will post the new effective date here and give reasonable notice of material changes through the service or by email when appropriate.

Contact

Contact NightShiftAgents LLC through the contact page for privacy requests or questions. We are based in Decatur, Georgia. Please choose “General question” and write “Privacy request” at the start of your message.