Privacy Policy
AFTERIMAGE, INC. ("we", "us") operates Overnight, a project and task manager. This notice explains how we handle information when you use Overnight's website, demo, account features and support. Contact overnight@afterimage.inc for privacy questions or requests.
The beta is for United States residents age 13 or older. Users under 18 need a parent or legal guardian to review and agree to our Terms with them. We do not use advertising trackers or sell personal information.
Information we collect and why
- Account information: email address, account identifier, sign-in information and profile information supplied by Google if you choose Google sign-in. We use this to authenticate you and maintain your account.
- Workspace information you enter: project/task names, descriptions, resource URLs, dates, priorities, progress, checklist items, savings entries, display name and preferences. We store and synchronize it to provide the features you request. Links may themselves contain personal or confidential information.
- Agreement information: the policy version you accept, an account-linked timestamp, your declared age band (13–17 or 18+), US eligibility and, for teens, your declaration that a parent/guardian agreed. We use this to administer eligibility and document agreements. We do not ask for a full date of birth or government ID during ordinary signup.
- Technical information: requests to our hosting, authentication and billing providers may include IP address, browser/device information, timestamps, diagnostics and security logs. We and our providers use these to deliver, secure and troubleshoot the service.
- Billing information: if you enter our test billing flow, Stripe processes the information you submit; we handle customer/subscription references, membership status and event records. Billing is currently test-only: use test payment details, never real card details. We do not receive full payment-card numbers through the app.
- Support: your email and information you choose to send, used to answer questions, resolve problems and process privacy requests. Please do not email passwords, authentication codes or complete payment details.
Who receives information
We use Supabase for authentication and database storage, Render for hosting, Google when you choose its sign-in service, and Stripe for test billing. Google Workspace handles our support email. Authorized company personnel may access information when necessary for support, security and operating the service. Providers receive information needed for their functions and may process technical, security or account information under their own terms and notices. Third-party sites you explicitly open from a resource link receive requests from your browser; we do not fetch the contents of your private linked documents.
We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect people or legal rights, investigate abuse, or support a business transfer subject to applicable privacy protections. We do not rent or sell personal information or share it for cross-context behavioral advertising. We do not use workspace content to train an AI model as part of Overnight.
Browser storage and tracking choices
Overnight uses browser storage for sign-in sessions and functional display state. Demo edits stay in the browser session and are not saved as an account workspace. Clearing site data can sign you out or remove local settings and unsaved work. Save or export first. We do not run advertising or cross-site analytics trackers. Because we do not conduct cross-context behavioral advertising or sell personal information, there is no such activity for Global Privacy Control to opt you out of; we do not use a Do Not Track signal to change essential account operations. If our practices change, we will update this notice and obtain consent or provide choices where required.
Retention and deletion
We retain account and workspace information while your account is active and as needed to provide the service. Trial expiration or cancellation alone does not delete your workspace. You can request account deletion at the address below. We verify requests before acting, stop applicable renewals and coordinate deletion across active systems. This is a manually handled request, not an instant erase button. We may retain limited records when necessary for legal obligations, security, fraud prevention, resolving disputes or documenting agreements; the reason and applicable retention will be explained in our response. Provider backups and security logs may persist until their retention cycles expire and are not used to restore a deleted account to ordinary service. We do not promise immediate deletion of every backup copy.
Availability and indefinite storage are not guaranteed. Keep your own exports. If we plan to close the service or materially reduce retention, we will seek to give reasonable notice and an opportunity to export where practical, subject to urgent security or legal requirements. Unsaved changes can be lost when a tab closes.
Your choices and requests
You can edit workspace information, export your projects/tasks through Account, and request access to other personal information, correction, deletion, or help with a privacy concern at overnight@afterimage.inc. Use the email associated with your account when possible. You do not need to accept new terms or pay to make a request. An authorized agent or parent/guardian may contact us; we may need proportionate evidence of authority and account ownership. We will not discriminate against you for exercising applicable privacy rights.
Rights and exceptions depend on applicable law. We aim to acknowledge requests within 10 business days and respond within 45 calendar days, or sooner if required by law; we will explain a permitted extension or refusal. If you disagree with a decision, reply with “Privacy appeal” so we can review it. Workspace export does not necessarily include authentication, billing or support records; request those separately. See Support & privacy requests for instructions.
Teens, parents and sensitive information
Overnight is not directed to children under 13 and does not permit their accounts. If you believe we have collected a child's information, contact us so we can investigate and take appropriate action, including deletion where required. Users 13–17 must involve a parent/guardian as described in our Terms. Eligibility and guardian agreement are self-declared; we do not claim verified parental identity. Parents may contact us about access, correction or deletion; we verify authority and protect the teen's information under applicable law.
Do not put passwords, payment-card numbers, government identifiers, medical records or other highly sensitive information into tasks or support messages. Overnight is not a health, financial, legal or emergency service and does not monitor tasks for emergencies.
Security and location
We use measures such as HTTPS on the hosted site, authenticated access and database access rules. No system is completely secure. Workspace content is not end-to-end encrypted and authorized service providers may process it. The beta is intended for US residents; providers may process information in the United States and other countries where they operate, whose laws may differ. Do not use the beta if you require a particular data-residency commitment.
Changes and contact
We will post a dated version of changes here and provide additional notice for material changes where required. Previous versions will remain available through their dated links. For privacy, security, accessibility or support: overnight@afterimage.inc, addressed to AFTERIMAGE, INC., Overnight support, California, United States.