Privacy policy

What we collect

• Account details: your name, email address, password (stored hashed by our sign-in provider) and two-factor settings.
• Profile and event details you enter: promoter or artist name, venues, dates, lineups, captions, hashtags and tags.
• Images you upload, such as flyers and artist photos, and the resized versions we make for each platform.
• Messages you send us through the contact form or the waitlist.

What we get from Facebook and Instagram

• When you choose Connect with Facebook, Meta gives us an access token for your account and for the Facebook Page you pick, plus the Page's name and ID and the username and ID of the Instagram account linked to it.
• We ask only for the permissions needed to list your Pages and publish posts you've scheduled: pages_show_list, pages_read_engagement, pages_manage_posts, business_management, instagram_basic and instagram_content_publish.
• We store the IDs of posts we publish and any error Meta returns, so we can show you whether each post went out.
• We don't read your private messages, friends lists or followers, and we don't post anything you haven't scheduled in a campaign.

How we use it

• To run the service: build your campaigns, publish your posts at the times you choose, and show you the results.
• To email you about your campaigns, such as when a post goes out or fails.
• To keep the service secure and fix problems.
• We don't sell your data, use it for advertising, or share Facebook or Instagram data with anyone except as described below.

Who we share it with

• Meta, when we publish a post for you to your Page or Instagram account.
• The providers that run the service for us: Vercel (hosting), Supabase (database, sign-in and file storage) and Resend (email). They process data only on our behalf.
• Authorities, if the law requires it.

How we protect and keep it

• Facebook and Instagram access tokens are encrypted before we store them, and data is sent over HTTPS.
• We keep your data while your account is open. If you disconnect Facebook, we delete the stored tokens right away. If you delete your account, we delete your data within 30 days, except where the law requires us to keep it.

Your choices

• You can see and edit your profile, events and campaigns in the dashboard at any time.
• You can disconnect Facebook and Instagram from the Account page, or remove the app in your Facebook settings under Business Integrations.
• You can ask for a copy of your data, a correction, or deletion by emailing us.

Children

• NightHerald is for promoters and artists aged 18 and over. We don't knowingly collect data from anyone younger.

Changes

• If we change this policy, we'll update the date below and tell signed-up users by email about significant changes.

Deleting your data

See how to delete your data.

Contact

Questions about privacy? Email privacy@nightherald.com.