Privacy Policy

This Privacy Policy explains how Nocturne(“Nocturne”, operated by Nocturne Inc, “we”, “us”) collects, uses, and shares information when you use our website and application (the “Service”).

Information we collect

• Account data — name, email address, password (stored hashed by our auth provider), and profile details you provide.
• Property and stay data — property details, photos, amenities, house rules, dates you offer, booking requests, and related messages or activity.
• Club and wallet data — property-management organizations, team membership, Moon wallet activity, holds, and booking history.
• Usage & device data— product analytics events and basic device/log information, collected only where permitted (see Cookies & analytics).

How we use information

To provide and secure the Service, authenticate you, operate property offers, booking requests and Moon wallets, send transactional messages, provide support, comply with legal obligations, and — with your consent — understand product usage.

Cookies & analytics

We use strictly necessary cookies to keep you signed in and remember your active organization. We do not load product analytics or store campaign attribution unless you explicitly allow analytics. If you allow it and arrive via a marketing link (with utm_* or ref parameters), we may store the campaign values already present in that URL in a browser cookie for up to 30 days so we can measure which channels lead to new accounts. Declining or withdrawing consent stops future analytics and attribution collection and removes that attribution cookie; it does not affect access to the Service. This preference does not retroactively remove account-linked records created while consent was active.

How we share information

We share data with processors who act on our behalf under contract — for example our infrastructure and database provider (Supabase), email delivery (Resend), background jobs (Inngest), and optional product analytics providers when you consent. We do not sell your personal information.

Data retention

We keep account, property, booking, and wallet data while your account is active and as needed for the purposes above. Some records are retained on a schedule, including read notifications and security audit events. Completed private data-export artifacts are removed after seven days when exports are enabled. Account deletion is subject to legal and security retention requirements and can retain or anonymize data shared with an organization or another member.

Your rights

Depending on your location (e.g. GDPR/UK GDPR, CCPA/CPRA) you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Available self-service controls appear in your account settings. You can also contact us using the details below.

Security & international transfers

We use industry-standard measures including encryption in transit, row-level access controls, and least-privilege service credentials. Data may be processed in countries other than yours; where required we rely on appropriate safeguards for those transfers.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy from time to time; material changes will be posted here with a new effective date.

Contact

Questions or requests? Email us at hello@stay-nocturne.com. Data controller: Nocturne Inc, Miami, FL, governed by the laws of Miami-Dade County, Florida.