Privacy Policy
Effective: October 11, 2026
Information we use
NightCatalyst uses account information you provide, such as your email address and authentication credentials, to operate your account. Passwords are stored as one-way password hashes rather than readable passwords.
Account email
When account email is enabled, NightCatalyst uses Resend to send verification and password-reset messages to the address you provide. The provider receives that address and message content. We store verification status and temporary security tokens to process these requests. Queued link tokens are encrypted; sent links retain a one-way verifier until expiration or use. We retain minimal delivery metadata (provider message identifier, account-message purpose and delivery timestamps) which expire 30 days after provider acceptance. Unmatched delivery callbacks expire after one day. Expired records are removed during periodic cleanup while the service is running. These records do not contain recipients, message bodies or link tokens. Open and click tracking are disabled. These messages are for account access, not marketing.
Payments
Subscription checkout and billing management are handled by Stripe. NightCatalyst does not receive or store your full payment-card number. Stripe may process billing, payment, fraud-prevention, and related information under Stripe's own terms and privacy practices.
Service activity
We may store scan history, account plan status, security logs, request identifiers, and technical usage information needed to operate, secure, troubleshoot, and improve the service.
Daily accuracy record
The app owner may lock one main scanner response per Eastern Time date for the shared accuracy journal. We retain the original response, its timestamps, predictions, app version, recording account identifier, and any outcome evidence. Signed-in members can see record dates and aggregate outcomes. Free accounts receive blurred placeholders; ticker symbols, prices, rationale and original setup details require Pro or owner access. Waiting does not unlock those details. Preview scans are held temporarily for delivery and are not added to accuracy history. Only the owner can export the journal.
Market data
Market and catalyst information may come from third-party data providers. Do not include sensitive personal information in ticker or scan inputs.
Retention and security
We retain information as reasonably necessary to operate the service, meet legal obligations, resolve disputes, and protect the service. We use technical controls such as encrypted HTTPS transport, restricted session cookies, password hashing, and signed billing webhooks. No system can guarantee absolute security.
Your choices
You may cancel a paid subscription through the Stripe billing portal. Account deletion and data-access requests will be supported through the NightCatalyst support process before general public launch.
Changes
This policy may be updated as NightCatalyst adds providers or features. Material changes should be reflected by an updated effective date.
This is a launch-stage policy draft and should be reviewed for the jurisdictions in which NightCatalyst will be offered.