Privacy Policy

Nightshift Watchdog is operated by Griffin Bunnell, a sole proprietor doing business as Nightshift Labs, in Texas, USA. In this policy, “we” means that business. The product is a heartbeat and spend monitor for jobs you run: agents, cron, and automations. Contact support@nightshiftwatchdog.com.

Information we collect

We collect only what we need to run an account, watch the jobs you point at us, and bill for a paid plan.

• Account details: your name, email address, and a hash of your password. We do not store the password itself.
• Workspace and monitor details: workspace name, monitor names and descriptions, schedules, grace periods, and alert settings you enter.
• Ping metadata. Each check-in stores the time we received it, whether it was a success, a start, or a failure, and any numbers you send: tokens, cost_usd, and duration_ms.
• IP address. Sign-in and ping requests include an IP address. We use it to rate-limit abuse. The stored rate-limit record is a hash of the address and a counter, and it expires. We do not attach the raw IP to the ping history in your dashboard. Our host may still keep operational logs of requests.
• Billing details: a Stripe customer id, subscription id, and subscription status. Card numbers stay at Stripe. We never see the full card number.
• Alert destinations you add, such as an email address, a Slack or Discord webhook URL, or a Telegram bot token. Webhook URLs and bot tokens are encrypted before they are written to the database.
• Messages you send us at the support address, and the content of emails we send you (alerts, sign-in links, password resets, invites, and the weekly summary).

How we use it

• To create your account, authenticate you, and show you the monitors in your workspace.
• To decide whether a job went silent, failed, recovered, or crossed a spend limit, and to send the alert you asked for.
• To charge for Pro and Team, apply plan limits, and handle cancellation through Stripe.
• To rate-limit pings and sign-in attempts, and to investigate abuse or a security incident.
• To answer a support request and to tell you about a change to these terms or this policy when we need to.

We do not use your monitor names, ping contents, or email address to train a model, and we do not use them for advertising.

Processors

These companies process data for us, under their own terms, only so we can run the service:

• Stripe processes payments, stores card details, and hosts the customer portal where you update a card or cancel.
• Vercel hosts the application and may process request logs, including IP addresses, as part of running the site.
• Neon hosts the Postgres database that stores accounts, monitors, pings, and encrypted alert settings.
• Resend delivers email. The recipient address and the message are processed by Resend so the mail can be sent. If email delivery is not configured, those messages are stored in our database instead.

A ping URL is a credential. Anyone who has it can submit check-ins for that monitor. Do not post it in a public repository.

We do not sell personal information

We do not sell personal information. We do not share it with data brokers, and we do not share it for cross-context behavioral advertising. We share it with the processors above to run Nightshift Watchdog, with other members of a workspace you join, and with authorities when the law requires it.

How long we keep it

Account, monitor, and ping data stays until you delete a monitor or ask us to delete the account. Rate-limit counters are short-lived. Billing records (invoices and the fact that a subscription existed) may be kept for as long as tax and accounting rules require, even after the rest of the account is gone. Encrypted alert secrets are deleted with the channel or the account.

Deletion and other requests

Email support@nightshiftwatchdog.com from the address on the account and ask us to access, correct, or delete your information. We will delete the account, workspaces you own, monitors, ping history, and saved alert destinations. We may retain invoices and payment records we are required to keep, and a copy of a message if we need it for a legal claim or a security incident. If you are a member of a workspace someone else owns, we remove you from that workspace. The workspace itself stays until an owner deletes it or asks us to.

You can delete an individual monitor yourself from its page. That removes its ping history.

Security

Passwords are hashed. Ping tokens are stored as a hash for lookup, with an encrypted copy so the dashboard can show the URL. Webhook URLs and bot tokens are encrypted with a key that is not stored in the database. No method of transmission or storage is perfectly secure. Use a unique password and keep ping URLs private.

Children

Nightshift Watchdog is a business tool. It is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has signed up, email us and we will delete the account.

Where we process data

We are based in Texas, USA. The processors above may store data in the United States and in other countries where they operate. By using the service, you understand that your information is processed in the United States.

Changes

If we change this policy, we will post the new version on this page and change the date at the top. Continued use after that date means you accept the update.

Contact

Griffin Bunnell, doing business as Nightshift Labs, Texas, USA. Email support@nightshiftwatchdog.com. The agreement for using the product is in the Terms of Service.