1. Introduction
NightFN (nightfn.com) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. By accessing or using NightFN, you agree to the practices described in this policy.
If you do not agree with any part of this policy, please discontinue use of the platform immediately.
2. Data we collect
We collect the following categories of personal data:
- Account information: username, email address, password hash, profile picture, and any optional details you provide.
- Transaction data: order history, payment receipts, delivery details, and dispute records.
- Device & session data: IP address, browser type, operating system, device fingerprint, and approximate location (country/region).
- Communication data: messages sent through our platform’s messaging system, support tickets, and feedback submissions.
- Usage analytics: page visits, click behavior, and feature interactions (collected via Google Analytics and internal logging).
3. How we use your data
Your data is used for the following purposes:
- To create and manage your account, authenticate logins, and secure your profile.
- To process orders, facilitate payments, and coordinate delivery between buyers and sellers.
- To provide customer support, handle disputes, and respond to inquiries.
- To detect and prevent fraud, abuse, unauthorized access, and other security risks.
- To comply with legal obligations, enforce our Terms of Service, and protect our legal rights.
- To improve platform performance, personalize your experience, and analyze usage trends.
4. Legal basis for processing
We process personal data under the following legal bases, as applicable under the GDPR and other relevant privacy regulations:
- Contractual necessity: processing required to fulfil our service agreement with you (e.g., order processing, account management).
- Legitimate interests: fraud prevention, platform security, analytics, and service improvement.
- Legal obligation: compliance with tax, accounting, and regulatory requirements.
- Consent: where you have explicitly opted in (e.g., marketing communications, optional analytics cookies).
6. Security measures
We implement industry-standard security measures to protect your data, including:
- Encrypted connections (TLS/SSL) for all data in transit.
- Hashed and salted password storage.
- Row-level security (RLS) and strict access controls on our database.
- Automated monitoring for suspicious activity and intrusion attempts.
- Regular security audits and dependency updates.
No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for keeping your password and account credentials confidential.
7. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law:
- Account data is retained while your account is active and for up to 12 months after closure, unless legal obligations require longer retention.
- Transaction and payment records are retained for 6–10 years in accordance with tax and financial regulations.
- Log and analytics data is retained for up to 26 months, after which it is anonymized or deleted.
- Support tickets and dispute records are retained for the duration of the relevant limitation period.
8. Your rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your personal data, subject to legal retention requirements.
- Restriction: request limited processing of your data in certain circumstances.
- Portability: request your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests or direct marketing.
- Withdraw consent: withdraw consent for optional processing at any time.
To exercise any of these rights, contact us at the email address listed in Section 12. We will respond within 30 days, or sooner where required by law.
10. Children’s privacy
NightFN is not intended for users under the age of 16 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete the data.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. The updated policy will be posted on this page with a revised date. Continued use of NightFN after changes are published constitutes acceptance of the updated policy.
12. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: [email protected]
- Discord: support via our official Discord server
- Platform: submit a ticket through our Support Ticket system