Data handling policy

Last updated October 31, 2026

This policy covers what we do with your devices, files, accounts and passwords while we work on them. It sits alongside our Privacy policy, which covers your contact and billing information, and our Session recording policy.

Who touches your data

Nightshift Support is run by one person, Matt Sutton, who does the work. We don't hand your job, your access or your data to anyone else, including subcontractors, without asking you first and getting your OK.

Remote sessions

• A remote session starts only when you start it or let us in, every time. We don't keep standing access to your computer unless you ask for it in writing (for example, for a business retainer), and you can remove it at any time.
• You can watch everything we do, ask what we're doing, and end the session at any moment.
• We use reputable remote-support software that encrypts the connection between your device and ours.
• When the session ends, our access ends.

Your files

• We open, view or change only what the job needs. If we need to open something personal or confidential to fix the problem, we'll tell you first.
• We don't copy your files off your device unless the job needs it, for example a backup before a risky repair or moving to a new computer, and you agree.
• Copies we make for a job are kept encrypted, used only for that job, and deleted within 30 days after the job is finished, unless you ask us in writing to keep them.
• We never sell, share or reuse your data, and we never look through it out of curiosity.

Passwords and accounts

• Where we can, you type your own password, or you give us a temporary one that you change after the job.
• If you give us a password, we keep it only in an encrypted password manager for as long as the job needs it, never in tickets, emails or notes, and delete it when the job is done.
• We help you get back into accounts that are yours. We won't help anyone get into an account or device that isn't theirs.
• We recommend changing any password you shared with us once the job is done.

Devices in our care

If we take a device away to work on it, we tell you where it is and when it's coming back, keep it in a locked, secure place, and return it to you or to a person you name. Old drives you ask us to dispose of are wiped or physically destroyed, and we'll confirm when that's done.

Our own security

• Our computers use full-disk encryption, up-to-date security software and automatic screen locks.
• Our business accounts use strong, unique passwords and two-step sign-in.
• Customer records live in a private system that only Matt Sutton can sign in to.

If something goes wrong

If we ever learn that your data was exposed while in our care, we'll tell you as soon as we can, in the most expedient time possible and without unreasonable delay as California law requires, explain what happened, and help you with what to do next.

NDAs and business requirements

Businesses can ask us to sign a non-disclosure agreement before we start. If your business has its own security or compliance rules, tell us and we'll follow them or tell you honestly if we can't.

Questions or deletion requests

Email matt@nightshiftsupport.com or call (310) 817-0294.