Privacy Notice

1. Data Nocturna handles

Nocturna processes account identity and contact data; authentication and account-security state; profile preferences; optional country, city, region, browser-detected time zone and time-zone confirmation; marketing consent; favorites; Library entitlements; download authorizations and events; Orders, payment references, refunds and disputes; Community state and credit ledgers; Service Requests, answers, links, quotes, acceptances, invoices, projects, revision requests and delivery history; Inbox messages and reviewed attachments; bookings and meeting links; support cases; notifications; attribution; and restricted operational audit evidence.

Nocturna does not intentionally expose payment credentials, provider secrets, raw private storage paths or passwords to customer or Admin interfaces. Payment card data is handled by Stripe rather than stored by Nocturna.

2. Location, IP and time zone

The application may receive normal network request data such as IP address and user-agent information at infrastructure or security boundaries. It does not claim an IP-derived precise location or store invented fraud signals. If a provider supplies a billing country or other transaction location, Nocturna may preserve the factual value with the accounting record. Optional Account country, city and region are customer-provided. A browser time zone is a device-derived suggestion and becomes a scheduling preference only after confirmation; it is not precise location tracking.

3. Why data is used

Data is used to operate accounts; deliver licensed files; process and reconcile provider-confirmed transactions; prevent duplicate or unauthorized access; qualify and deliver services; manage quotes, revisions and bookings; provide the private Inbox, notifications and support; preserve legal acceptance and transaction evidence; honor privacy and account choices; diagnose reliability and security; and, only when permitted, provide marketing or growth communication.

4. Customer 360, Inbox and notifications

Customer 360 is an authorized Admin view that composes factual records already held in Nocturna systems. It does not create a hidden score or impersonate the customer. Inbox content remains private to the customer and authorized operators. In-app notifications carry operational or permitted promotional updates and preserve delivery/read state. A broadcast control must be enabled before a campaign can deliver; drafting alone does not notify customers.

5. Support View

An authorized Admin may start a short-lived, read-only Support View for one customer with a recorded reason. The Admin remains the authenticated actor; Nocturna does not issue a customer token, obtain the customer's password or impersonate the customer. Sensitive mutations—including payments, refunds, messages, downloads, legal acceptance, bookings and profile changes—are blocked in Support View. Start, route, expiry, revocation and blocked-operation evidence is audited. Customers are not automatically notified by the current implementation.

6. Services, bookings and meeting links

Service submissions are visible to the submitting customer and authorized Admins. Accepted quotes, invoice facts, project status, files and revision history remain connected to the engagement. Scheduling stores owner availability, temporary holds, bookings, time-zone rendering and changes. A meeting link is visible only to eligible participants and operators; customers should not place passwords or confidential credentials inside free-text fields.

7. Providers and transfers

Nocturna uses infrastructure and service providers as configured, including Supabase for database/authentication/storage, Vercel for application hosting, Stripe for payments, Google Drive or private storage for authorized delivery, and Resend for email only when enabled. Provider processing and international transfers follow the provider's own terms and the configuration actually in use. Nocturna does not claim a provider or transfer mechanism that is not configured.

8. Marketing choices

Marketing consent is optional and separate from messages necessary to operate an account or transaction. Customers can change marketing choices in Account settings or use an available unsubscribe path. Disabling marketing does not suppress security, legal, payment, service, booking or support messages that are necessary and enabled. Marketing and growth automations remain inactive while their protected controls are off.

9. Retention and deletion

Nocturna removes or anonymizes data that is no longer needed, subject to implemented lifecycle rules and legitimate evidence needs. Account closure has a seven-day cancellation period. Removable profile, preference and marketing data may then be anonymized or deleted. Financial, tax-supporting, acceptance, entitlement, download, service, booking, support, dispute, security and audit records may be retained for the period reasonably needed to establish transactions, rights, obligations, safety and mandatory compliance. Already delivered files cannot be remotely retrieved from a customer's device. Current bounded operational rules include short Support View sessions, limited support-session evidence and retention jobs documented in the repository; final statutory retention periods require professional review.

10. Access and contact

Authenticated customers can view core Account records and request a data export or closure. Support can address correction, access, deletion, objection or other privacy questions and will verify identity before disclosing protected data. Controller legal name, address, DPO details and jurisdiction must not be inferred from this draft if they are not configured in the application.