Privacy policy

Last updated October 31, 2026

This policy explains how Nightshift Support ("we", "us"), run by Matt Sutton in Los Angeles County, California, handles personal information collected through this website (nightshiftsupport.com), by phone and email, and while we provide IT support. It is written to meet the California Online Privacy Protection Act and to reflect the rights California residents have under the California Consumer Privacy Act.

What happens to the files and data on your devices while we work on them is covered separately, in our Data handling policy.

Information we collect

Information you give us

• Contact details: your name, email address, phone number and, if you give it, your company name.
• Your request: what's wrong, how urgent it is, and anything else you tell us by form, phone or email.
• Service records: tickets, notes, quotes and the work we did for you.
• Billing details: invoices, payment status and your billing address or ZIP code. Card and bank details are collected and held by Stripe, our payment processor; we never see your full card number.
• Session recordings: only if you agree to a recording before a remote session (see our Session recording policy).

Information collected automatically

• Spam protection: our ticket form uses Cloudflare Turnstile, which checks signals from your browser and device to tell people from bots.
• Server logs: our hosting provider records technical details of each request, such as IP address, browser type and time, to run and secure the site.
• Your draft ticket: while you fill in the form, a copy of what you typed is kept in your own browser's session storage so it isn't lost if something goes wrong. It never leaves your browser this way and is cleared when you close the tab.

We don't use analytics, advertising or tracking cookies, and we don't build profiles of visitors.

How we use it

• to answer your request, give you a quote and do the work;
• to send you emails about your ticket: confirmation, updates, quotes and invoices;
• to take payment and keep the business and tax records the law requires;
• to keep our website and systems secure and stop spam and fraud;
• to meet our legal obligations and protect our legal rights.

We don't send marketing emails unless you ask for them.

Who we share it with

We don't sell your personal information, and we don't share it for cross-context behavioural advertising. We don't share it with anyone for their own marketing. We share it only with service providers that help us run the business, and only what each one needs:

• Vercel hosts this website and our customer records system.
• Neon hosts the database our ticket records are stored in.
• Resend sends our emails to you.
• Stripe processes payments and sends invoices.
• Cloudflare provides the spam check on our ticket form.
• Our remote-support software provider, when we connect to your device.
• Our email, phone and accounting providers, when you contact us or we keep the books.

We may also disclose information when the law requires it (for example, a valid court order), to protect someone's safety, or to a buyer if the business is ever sold, in which case this policy continues to apply to your information.

How long we keep it

• Tickets, quotes and invoices: for as long as you're a customer, and then for up to 7 years for tax and accounting records.
• Session recordings: 30 days, unless you ask us to keep one longer or delete it sooner (see the Session recording policy).
• Server and spam-check logs: for the short periods our providers keep them.

Your privacy rights

Whether or not the law requires it of a business our size, we give everyone these rights:

• Know and access: ask what personal information we hold about you and get a copy.
• Correct: ask us to fix information that is wrong.
• Delete: ask us to delete your information. We'll delete everything we're not required to keep, such as tax records, and tell you what we kept and why.
• Opt out of sale or sharing: we don't sell or share personal information, so there is nothing to opt out of. We treat a Global Privacy Control signal from your browser as an opt-out request anyway.
• No discrimination: using these rights never changes the price or quality of our service.

To make a request, email matt@nightshiftsupport.com or call (310) 817-0294. We'll confirm who you are, usually by replying to the email address on your ticket, and answer within 45 days. You can also have someone act for you with your written permission.

California "Shine the Light": we don't share personal information with other businesses for their direct marketing.

"Do Not Track"

Because we don't track visitors across websites or over time, our site works the same whether or not your browser sends a Do Not Track signal.

Security

We use reasonable safeguards for the kind of information we hold: encrypted connections (HTTPS) for this site and our systems, sign-in protection on our own accounts, and limited access (only Matt Sutton can see customer records). If a breach ever affected your information, we would tell you as California law requires. More detail is in our Data handling policy.

Children

Our services are for adults and businesses. We don't knowingly collect information from children under 16. If you think a child has sent us information, contact us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the "last updated" date above. If a change is significant, we'll also tell current customers by email.

Contact

Nightshift Support, Matt Sutton: matt@nightshiftsupport.com, (310) 817-0294.