Privacy Policy
Last updated: September 5, 2026
Information we process
We process account details such as email, profile, subscription and team membership; saved research and alerts; chat messages, tool results, generated artifacts, uploaded skills and saved memories; and support correspondence. We also process usage, email delivery, device and security records to operate and protect the service. Stripe processes payments; our application stores billing references and subscription status rather than your full card number.
How we use it
We use this information to provide research and chat features, remember information when enabled, manage access and billing, troubleshoot problems, prevent abuse, and answer support requests. Email preferences and unsubscribe links control optional communications; essential account, security and billing messages may still be sent.
AI processing and providers
Relevant chat content, selected memories, uploaded skill instructions and tool results can be sent to OpenRouter and the model providers it routes requests to. Provider logging, retention and training policies vary; we do not promise zero retention or that every provider excludes training. Do not upload credentials or sensitive information you are not authorized to share. Supabase provides database, authentication and storage services; Netlify and Railway host application services; Stripe handles payments; and email delivery providers process messages and delivery events. Providers may process information outside your country.
External research tools
When enabled, research tools can send search terms, domains, URLs and other relevant tool inputs derived from your request to search, website-content retrieval, and market-data providers to carry out your research. These services process requests under their own policies. Do not put private information into a query or URL you do not want those services to receive.
Browser storage and analytics
We use browser storage for sign-in sessions, application preferences and caching. With your permission, PostHog measures page visits, campaign referrals and actions such as signup, checkout, research saves and exports. These optional events use a random browser identifier and, when signed in, an account identifier rather than your email address. Use Analytics preferences to change your choice. We honor browser Global Privacy Control and Do Not Track signals for optional browser analytics. Separately, we process billing outcomes, email delivery and unsubscribe records, and AI model usage, latency and cost to operate and evaluate the service. Analytics events exclude chat text, model prompts and responses, uploaded files, passwords and card details; session replay is disabled. Essential sign-in storage is separate from optional analytics.
Retention and deletion
Account and research content is retained to provide your workspace until removed through a verified deletion request or another applicable retention process. We do not currently automatically delete inactive accounts on a fixed schedule. Archiving a thread keeps its contents. Turning memory off does not erase saved memories; deleting a memory removes its saved memory record, but not copies in previous chats, generated artifacts or backups. Disabling an uploaded skill does not erase it. Request erasure if you want these records removed, including copies in chat history or generated artifacts.
Requests, exceptions and backups
Email jcole@nightwatcherai.com from your account address to request access, correction, export or deletion. Account settings provide email-draft links. Support handles these requests; this is not instant automated deletion. We verify ownership, clarify scope and explain information that must remain for billing, disputes, security, legal obligations or suppression of unwanted email. We aim to respond within 30 days, or sooner where required by law, and explain any permitted extension. Backup copies and provider-held records may persist under separate retention schedules; deletion does not guarantee immediate removal from every backup. Subscription cancellation is available separately in Account settings.
Security and your rights
We use access controls and other safeguards, but no service can guarantee absolute security. Depending on your location, you may have rights to access, correct, delete or obtain a copy of personal information, object to or restrict processing, withdraw consent, or complain to a relevant regulator. Contact us to exercise applicable rights or ask about our providers. We may disclose information when legally required or to protect the service and its users.
Contact and changes
Contact Night Watcher AI at jcole@nightwatcherai.com with privacy questions. We publish policy changes here with an updated revision date and provide additional notice of material changes where required.
Provider details: OpenRouter provider policies. Analytics provider: PostHog privacy policy.