Privacy Policy

Nightro (nightro.ai) is a service that helps businesses run their Google Ads: it watches campaigns, explains results, recommends fixes and makes the changes a business approves. In this policy "Nightro", "we" and "us" mean the team that operates nightro.ai. Questions about this policy go to admin@nightro.ai.

We collect only what Nightro needs to do its job:

• Your Google sign-in. When you sign in with Google we receive your name, email address and profile picture (the openid, email and profile permissions). We use them to know who you are and which businesses you may open.
• Google Ads data. When an owner connects a Google Ads account, Google asks them to allow access to it (the Google Ads permission). Nightro then reads that account's settings and results: campaigns, budgets, ad groups, ads, keywords, search terms, targeting, conversions and change history. Google gives us a refresh token so Nightro can keep reading while nobody is signed in; we store it encrypted (AES-256-GCM).
• Business details you give us. Each business's profile, goals, guardrails and settings, and the people invited to it.
• Data from tools you connect. If you connect your own systems, for example a CRM, Nightro receives what that connection sends, such as counts of leads, booked consults and sales, so it can judge campaigns on real results. The Website Doctor reads the public pages of your website.
• Activity and technical records. Who approved, rejected or undid each change, the questions asked to Nightro AI, and the technical logs needed to keep the service running and secure.

We use this information only to provide Nightro to you:

• to show your accounts' results, alerts and reports to the people you invite;
• to find problems and prepare recommended changes, with the evidence behind them;
• to make in Google Ads the changes a person approved, or that automation you switched on may make inside the limits you set;
• to email the alerts and digests you ask for;
• to keep the service secure, fix problems and meet legal duties.

We do not sell your information, and we do not use it for advertising.

Nightro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide and improve the features you use in Nightro, as described in this policy.
• We do not sell Google user data, use it for advertising, or let people read it except with your permission, for security, to comply with law, or as part of operating the service for you.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
• You can remove Nightro's access at any time: disconnect the account in Nightro's Settings, or remove Nightro at myaccount.google.com/permissions.

Nightro AI explains results and drafts recommendations. To do that, the parts of your account data a question needs are sent to our AI provider, Anthropic, through its business API. Under Anthropic's commercial terms that data is not used to train its models. Every number Nightro AI shows is checked against your own data before you see it, and nothing it suggests changes your account without approval.

We share information only with the companies that run parts of Nightro for us, under contracts that limit how they may use it:

• Vercel (hosting) and Supabase (database), in the United States;
• Anthropic (the AI behind Nightro AI);
• Google, when Nightro reads or changes your Google Ads account on your behalf;
• an email provider, for the alerts and digests you choose to receive.

We may also disclose information when the law requires it, or to protect the rights and safety of people and of Nightro. If Nightro is ever sold or merged, this policy will keep applying to the information we hold.

Information travels encrypted (HTTPS) and is stored encrypted at rest; Google sign-ins are encrypted again with our own key. Each business sees only its own data, and only the people invited to it can open it. Sign-ins expire and are checked again regularly, and every change Nightro makes is recorded with who allowed it.

We keep a business's data while it uses Nightro, so its history and results stay available. When a business stops using Nightro, or when you ask us, we delete its data and its saved Google sign-ins within 30 days, except records the law requires us to keep. Disconnecting Google Ads stops all further reading at once.

You can ask for a copy of your information, ask us to correct it, or ask us to delete it, by writing to admin@nightro.ai. We answer within 30 days. Owners can remove people and disconnect accounts themselves in Settings.

Nightro is a tool for businesses. It is not meant for children, and we do not knowingly collect information from anyone under 16.

If we change this policy, we will post the new version here with a new date, and tell owners in Nightro before a significant change takes effect. The Terms of Service explain the rest of how Nightro works.