Your data, handled with care.

1. Who we are

Nightly Slate ("Nightly Slate", "we", "us") provides NyteBoard, a TV menu-display platform, along with a website builder, a staff-communication toolkit, the Slate assistant, and an advertising marketplace (together, the "Service"). This policy explains what personal information we collect, how we use and share it, and the choices you have.

Questions or requests: support@nightlyslate.com or (712) 470-9817.

2. Data we control vs. data we process for restaurants

Our Service is used by restaurants (our "Customers"), by the staff and managers they invite, by businesses that advertise ("Advertisers"), and by members of the public who view a Customer’s displays or website.

For some information we are the party that decides why and how it is handled — for example, a Customer’s own account and billing details, and communications with us. For other information we act on a Customer’s behalf: staff and employee account data, and content a Customer publishes, are controlled by that Customer, and we process it to provide the Service to them. If you are a staff member or a visitor to a restaurant’s site and want to exercise choices about your information, the restaurant is the right first point of contact, and we will support them.

3. Information we collect

Account and contact details you give us: your name, email address, phone number, restaurant or business name, and the login credentials you create.

Staff and employee accounts: when a Customer invites managers, staff, or employees, we collect their email address, assigned role, and the permissions granted to them (including a record of who changed a permission and when), along with notification preferences and, where features are read or acknowledged, read receipts.

Device and notification data: if you enable push notifications, we store the notification "endpoint" your browser provides and basic information about the device or browser (such as its user-agent) so we can deliver notifications and let you manage them per device.

Content you enter or upload: menus, item descriptions, prices, photos, event details, website copy, and display settings.

Advertiser information: for Advertisers, the business and contact details, the destination website, the advertising content submitted, and campaign and billing details.

Payment and payout information: handled by our payment processor, Stripe. We do not receive or store full payment card numbers. Where a Customer receives cash payouts for hosting advertising, Stripe collects the bank, identity, and tax information required to make those payouts.

Automatic and log data: basic server logs and technical information needed to operate and secure the Service. We use IP addresses to rate-limit and protect the Service; we do not use them to build advertising profiles.

4. How we use information

To create and run accounts; display menus, events, and websites; operate the Slate assistant and other features; deliver notifications; process subscriptions and, where applicable, advertising payouts; send service and setup messages; respond to support, demo, and other requests; prevent fraud and abuse; and keep the platform secure and reliable.

We may create aggregated or de-identified information that does not identify you, any individual, or any specific content, and use it to understand and improve the Service.

5. Artificial intelligence (Slate)

Some features, including the Slate assistant, use a third-party AI provider (Anthropic). When you use these features, the content and instructions you provide — which may include menu text and photos you upload — are sent to that provider so it can generate a response or perform the action you asked for. The provider acts as our service provider for this purpose and, under our arrangement, does not use your business content to train its general models.

AI-generated output can be inaccurate or incomplete. You are responsible for reviewing it before and after it is published.

6. Advertising

We do not use advertising cookies, tracking pixels, or third-party advertising networks, and we do not currently track or profile the people who view displays or websites.

Where advertising is shown, it is rotated by us based on the venue and settings — not on any profile of the individual viewer. If we introduce measurement of advertising in the future (for example, counting scans or views), we will update this policy and describe what is collected before doing so.

7. Location information from display devices

If you connect a TV or other device to show your menus (a "display device"), that device may ask permission to share its precise geographic location with us. We use this in one narrow way: to confirm that display devices are operated at the licensed business address on the account, and to detect misuse — for example a device that has been resold, relocated, or run from a location the account does not cover. This protects the integrity of the Service and helps us enforce our terms. We are the party responsible for this particular use.

Location sharing happens only after the device grants the browser’s location permission, and only on the pages that actually render a display — never on the sign-in, editor, or settings screens you use to manage an account. Because someone may briefly open a live display on a phone or laptop to check that it looks right, we ignore short and occasional views entirely: only a display operating from outside the expected area continuously — over hours, and as a pattern across the day — is ever flagged. A single trip out of range, a brief check, or an occasional inaccurate reading triggers nothing; and if a device declines the permission or its location cannot be determined, we simply cannot verify it and do not penalize the account.

When location is available from a display device, we store the coordinates it reports, an identifier for that display, the distance from the account’s business address, whether it fell inside the expected area, and the time — associated with the account and the specific display, never with any individual viewer. This information is access-restricted at the database level, is never shown on public menu pages or to the public, is never used for advertising or to profile viewers, and is not sold or shared. We keep these location records only for the limited period needed to identify sustained misuse, after which they are automatically deleted.

To make this possible, we ask for your business’s street address when you create an account, and use a mapping service (the U.S. Census Bureau geocoder, with OpenStreetMap’s Nominatim as a fallback) to convert it — once — into map coordinates for your venue. We show you the result so you can confirm it before saving.

8. We do not sell or share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have no "Do Not Sell or Share" obligations because we do not engage in those activities.

9. Who we share information with

We share limited information with vendors that help us run the Service, each acting on our behalf and only with what it needs: Supabase (database, authentication, and storage), Vercel (hosting), Anthropic (the Slate assistant), Stripe (payment processing and, for advertising payouts, Stripe Connect), Resend (transactional email), OpenWeather (display weather effects), and — only to convert a Customer’s business address into map coordinates — the U.S. Census Bureau geocoding service and the OpenStreetMap Foundation’s Nominatim service.

We may also disclose information if required by law, subpoena, or valid legal process; to protect the rights, safety, or property of Nightly Slate, our Customers, or others; to investigate fraud or security issues; or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this policy or notify you of any material change.

10. Cookies

We use strictly-necessary cookies for authentication and to keep you signed in. We do not use advertising cookies or third-party analytics or tracking cookies.

11. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements, and we take steps to remove information we no longer need. Copies may persist for a limited time in routine backups after deletion.

If you ask us to delete your information, we will do so except where we are required or permitted by law to keep it (for example, records needed for tax, accounting, or fraud-prevention purposes).

12. Your choices and rights

You may access, correct, or request deletion of your personal information, and you may turn off push notifications at any time from your device or account settings and unsubscribe from any marketing email using the link it contains. To make a request, email support@nightlyslate.com, and we will verify and act on valid requests within a reasonable time.

Depending on where you live, you may have additional rights under your state’s privacy law. Based on our size and how we operate, we are not currently a "covered business" under those laws, but we will still honor reasonable requests as described above. If you are a staff member or a visitor to a restaurant’s website, please also contact that restaurant, which controls its own account and site.

13. Security

We use reasonable administrative and technical measures to protect information, including encryption in transit (TLS), access controls, and database-level access restrictions. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any issue. If a security incident affects your personal information, we will notify you as required by applicable law.

14. Children

The Service is intended for businesses and their staff and is not directed to children under 13, and we do not knowingly collect personal information from children. Customers must not use the Service to collect personal information from children or to run child-directed data collection.

15. Where your information is handled

The Service is intended for use in the United States, and information is processed in the United States. We do not target our Service to individuals in the European Union or United Kingdom. If you access the Service from outside the United States, you understand your information will be processed in the United States.

16. Changes and contact

We may update this policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice. Questions or requests: support@nightlyslate.com or (712) 470-9817.