Privacy Policy
We do not sell your data. Ever. NiteWtch is an operational tool for IT and security teams. Your alert data, contact information, call records, and account details exist solely to power the service you pay for — not to be sold, rented, licensed, or shared with data brokers, advertisers, or any third party for commercial gain. This is not a legal carve-out; it is our business model.
Contents
1. Scope of This Policy
This Privacy Policy describes how Teknollejists Inc ("NiteWtch," "we," "us," or "our") collects, uses, and protects information when you:
- Access or use our website at nitewtch.com and related subdomains;
- Create an account and use the NiteWtch platform (alert intake, AI Studio, on-call escalation);
- Interact with us for sales, support, or other business purposes.
This Policy does not apply to data that NiteWtch processes purely as a data processor on behalf of our customers. When NiteWtch processes alert emails, call records, and operational data on a customer's behalf, that processing is governed by our Data Processing Agreement ("DPA") with the customer, and the customer controls how that data is used.
2. What Data We Collect
2.1 Account and Contact Information
When you register for NiteWtch, we collect:
- Name and email address
- Company name and job title
- Phone number (used for on-call escalation and account security)
- Billing address and payment card information (processed by our payment processor; we do not store raw card numbers)
- Password (stored as a salted cryptographic hash — never in plain text)
2.2 Platform Operational Data
As you use the NiteWtch platform, we collect and store the data necessary to provide the service:
- Alert data: Email metadata (sender, recipient, subject, timestamp), parsed alert fields, severity levels, and incident state
- Call records: Call timestamps, duration, status (answered, acknowledged, missed), DTMF input logs, and recordings (where enabled by customer)
- Sensor data: Host check results, metric readings, and health status reported by installed NiteWtch agents
- On-call schedules: User availability windows, group memberships, and timezone settings
- Audit logs: Configuration changes, user actions, and administrative activity within your account
2.3 Website and Application Usage Data
When you visit our website or use the platform interface, we may collect:
- IP address and approximate geographic location (country/region)
- Browser type, operating system, and device identifiers
- Pages visited, features accessed, and session duration
- Referring URL
This data is used strictly to operate, secure, and improve the platform. It is not used for behavioral advertising and is never combined with third-party advertising profiles.
2.4 Communications
If you contact our support team, we retain records of those communications in order to resolve your issue and improve our service.
3. How We Use Your Data
We use the data we collect for the following purposes — and only these purposes:
- Provide and operate the Services: Routing alerts, triggering escalations, placing calls, generating reports, and running AI Studio parsing sessions.
- Account management: Creating and maintaining your account, processing payments, and communicating about your subscription.
- Security and fraud prevention: Detecting unauthorized access, investigating suspicious activity, and enforcing our Terms of Service.
- Product improvement: Analyzing aggregated, anonymized usage patterns to improve platform performance and develop new features. This analysis never identifies individual customers or users.
- Legal compliance: Responding to lawful legal process and complying with applicable laws.
- Customer support: Investigating and resolving issues you report to us.
- Transactional communications: Sending invoices, security alerts, and important service notices. We do not send marketing emails without your explicit opt-in.
4. How We Share Your Data
NiteWtch does not sell, rent, or trade your personal data. We share it only in the following limited, necessary circumstances:
4.1 Service Providers
We engage carefully vetted third-party companies to help us deliver the Services. These providers operate strictly under our instructions, have no independent right to use your data for their own purposes, and are bound by confidentiality agreements. Examples include:
- Payment processors (to handle subscription billing)
- Voice and SMS carriers (to deliver call and text escalations to your on-call contacts)
- Cloud infrastructure providers (to host and run the platform)
- Error monitoring tools (to detect and fix platform bugs)
We do not use advertising networks or data brokers as service providers and we do not share your data with them.
4.2 Legal Requirements
We may disclose your data if required by a court order, subpoena, or other binding legal demand. Where legally permitted, we will notify you before complying and will limit disclosure to what is strictly required.
4.3 Business Transfers
If NiteWtch is acquired by or merges with another company, your data may be transferred as part of that transaction. Any successor entity will be required to honor this Privacy Policy or provide you with advance notice of any material changes. We will never sell your data as a standalone asset independent of the business.
4.4 With Your Consent
We may share your data in other circumstances with your prior explicit, informed consent.
5. What We Will Never Do With Your Data
To be explicit, NiteWtch will never:
- Sell your personal data to any third party for any amount of money or other consideration.
- Rent or license your data to data brokers, list companies, or any third party for marketing purposes.
- Use your alert data or call records to profile you for advertising purposes.
- Share your contact information with any advertiser, sponsor, or marketing partner.
- Use your data to train AI models that will be sold to or accessed by third parties without your explicit written agreement.
- Combine your operational data with commercial third-party datasets to build behavioral profiles.
- Share or sell mobile information (including phone numbers collected for SMS delivery) with or to third parties or affiliates for marketing or promotional purposes.
Your data is an operational input to deliver a service you purchased. Full stop.
6. Security
We maintain administrative, physical, and technical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption of data in transit (TLS 1.2+) and at rest
- Role-based access controls limiting which employees can access customer data
- Multi-factor authentication for all internal administrative access
- Regular security assessments and vulnerability scanning
- Isolated, per-tenant data storage with logical separation
No security system is 100% impenetrable. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Services. Specifically:
- Account data: Retained while your account is active and for 90 days after account closure to allow for reactivation.
- Alert and call records: Retained per your tenant's configured retention policy (default 90 days; configurable up to indefinite).
- Email files (.eml): Retained per your tenant's email retention setting (30 days, 90 days, 1 year, or indefinite).
- Audit logs: Retained for a minimum of 1 year for compliance purposes.
- Billing records: Retained for 7 years as required by applicable tax and financial regulations.
When data is deleted, it is removed from active storage within 30 days and purged from backups within 90 days.
8. Your Rights
Depending on your location, you may have the following rights with respect to your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to our legal retention obligations.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing of your data for specific purposes.
- Restriction: Request that we restrict processing of your data in certain circumstances.
To exercise any of these rights, email us at privacy@nitewtch.com. We will respond within 30 days (or sooner if required by applicable law). We may need to verify your identity before acting on your request.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of "sale" of personal information. As noted above, we do not sell personal information.
If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under GDPR including the right to lodge a complaint with your local supervisory authority.
9. Cookies and Tracking
We use a minimal set of cookies strictly necessary to operate the platform:
- Session cookies: To maintain your logged-in state (httpOnly, Secure, SameSite).
- CSRF tokens: To protect form submissions against cross-site request forgery.
- Preference cookies: To remember settings like UI theme and timezone display.
We do not use third-party advertising cookies, tracking pixels, or behavioral analytics SDKs (such as Google Analytics, Meta Pixel, or similar) on the authenticated platform. Our public marketing website may use basic anonymized analytics to understand page traffic; these cookies do not contain personal identifiers and are not shared with advertising networks.
10. Children
The NiteWtch platform is not directed at or intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at privacy@nitewtch.com and we will promptly delete it.
11. International Data Transfers
NiteWtch is based in the United States and its infrastructure is primarily hosted in US-based data centers. If you are accessing the Services from outside the United States, your data may be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.
For customers in the EEA or United Kingdom, we rely on Standard Contractual Clauses (SCCs) as the legal mechanism for such transfers. A copy of our Data Processing Agreement is available upon request at privacy@nitewtch.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by posting a notice in the platform at least thirty (30) days before the changes take effect. The updated policy will always be available at nitewtch.com/privacy.html. Continued use of the Services after the effective date constitutes acceptance of the revised policy. If you do not agree with material changes, you may close your account prior to the effective date.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Teknollejists Inc (operating as NiteWtch)
Privacy Team
Email: privacy@nitewtch.com
We take privacy concerns seriously and will respond within 30 days.