Privacy Policy

1. Who We Are

NightOps Systems, a trading name of BDM Digital Enterprises LLC ("NightOps," "we," "our," or "us"), provides warehouse and logistics operations software. We are a software company serving logistics businesses.

This policy explains what we do with personal information. It covers two different situations, and your rights differ between them:

• This website (nightopssystems.com), where we decide how your information is used. Here we are the controller.
• The NightOps platform, where our customers load their own business data and decide how it is used. There they are the controller and we act as their processor, handling data under their instructions and their contract with us. If you are an employee or customer of a NightOps customer, direct your privacy requests to them.

2. What This Website Collects

This site runs no analytics, no advertising or tracking scripts, and no third-party embeds. It sets no cookies and asks for no cookie consent because there is nothing to consent to. Your browser contacts only our own domain when loading these pages.

We collect only:

• Demo request details — the name, work email, company, and optionally phone number, company size, and message that you type into the request form. Nothing on this site is collected without you typing it and pressing submit.
• IP address, briefly — when you submit the form, your IP address is used to enforce a rate limit that prevents automated abuse. It is stored for this purpose only and automatically discarded within 24 hours. It is never attached to your demo request or used to profile you.
• Standard server logs — our hosting provider records request metadata such as IP address, timestamp, and user agent, as any web server does. We do not use these logs to build profiles of visitors.

3. Why We Use It, and Our Legal Basis

• To respond to your demo request and correspond with you about it. Legal basis: steps taken at your request before entering a contract, and our legitimate interest in replying to enquiries.
• To prevent abuse of the form and keep the site available. Legal basis: our legitimate interest in security.
• To meet legal obligations where the law requires us to keep or produce records.

We will not add you to a marketing list on the strength of a demo request. If we ever send marketing email, it will be because you separately opted in, and every message will carry an unsubscribe link.

4. Who We Share It With

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have never done so. We share data only with the service providers who run our infrastructure, each bound by contract to process it only on our instructions:

• Vercel — website hosting and delivery (United States)
• Supabase — database hosting for demo requests and platform data (United States)
• Resend — delivery of the notification email generated by your demo request (United States)
• OpenAI — processing for the platform's AI features. Content is sent for processing and a response only.

We do not use your personal information, or our customers' business data, to train AI models — ours or anyone else's. We may also disclose information where legally compelled, or in connection with a merger or acquisition, in which case we will give notice before your information becomes subject to a different policy.

5. International Transfers

We are based in the United States and our providers store data there. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information will be transferred outside your home jurisdiction. Where required, we rely on the European Commission's Standard Contractual Clauses, or the UK International Data Transfer Addendum, together with additional safeguards appropriate to the transfer.

6. How Long We Keep It

• Demo requests: up to 24 months from your last contact with us, then deleted.
• Rate-limiting records containing IP addresses: under 24 hours.
• Server logs: as retained by our hosting provider, typically under 30 days.
• Platform customer data: for the life of the customer's account, and deleted or returned after termination per their agreement with us.

7. Your Rights

Wherever you live, you may ask us to give you a copy of your information, correct it, delete it, or send it to another provider. You may also object to or ask us to restrict a particular use. We do not charge for this and we will not treat you differently for asking.

If you are in the EEA, UK, or Switzerland, these rights come from the GDPR and UK GDPR, including the right to withdraw consent at any time and to complain to your national supervisory authority.

If you are in California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, Utah, or another US state with a privacy law, you have equivalent rights to know, delete, correct, and opt out of sale, sharing, or targeted advertising — none of which we do. We honour the Global Privacy Control signal automatically.

To exercise any right, email privacy@nightopssystems.com. We reply within 30 days, or 45 where the law allows an extension and we tell you why. If we refuse a request, you may appeal by replying to our decision, and we will respond to the appeal within 60 days.

8. Security

Data is encrypted in transit and at rest. Access to production systems is restricted to the people who need it, and demo requests are readable only through privileged server-side access — never by the public or by unauthenticated visitors. No system is perfectly secure, but if a breach affects your personal information we will notify you and the relevant regulator within the timeframes the law requires.

9. Children

NightOps is business software, not intended for children. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

10. Changes to This Policy

If we make a material change, we will update the date above and, where the change meaningfully affects your rights, tell you directly before it takes effect. We will not apply a materially different use to information already collected without your consent.

11. Contact Us

Questions, requests, or complaints about privacy go to privacy@nightopssystems.com, or write to NightOps Systems, BDM Digital Enterprises LLC.