Privacy Policy
Last updated: 11 August 2026.
Who we are
Nightshift Software is a trading name of Joe Tebbett, who is the data controller for the personal data described here, across every service we run. Correspondence address: Joe Tebbett / Nightshift Software, Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom. Email: support@nightshiftsoftware.co.uk.
This is the only privacy notice we publish. It covers Rolegend, Masquerade AI and this website. What differs between services is which companies process data on our behalf, and each service publishes its own list of those.
What we collect
- Account: the email address you sign in with, and whatever profile details that service asks for.
- What you create: the content you make in a service. It is private to your account unless that service gives you a way to publish it and you use it.
- Billing: if you subscribe, Stripe handles your card details on its own hosted pages and we never see them. We hold the customer and subscription identifiers, your plan, and its status.
- Support: the messages you send us and our replies.
- Logs: ordinary server logs, meaning request paths and errors, kept so we can find out why something broke.
Lawful basis and retention
For each of those we have to have a reason in law for using it, and we have to tell you how long we keep it. Both, in the same order:
| What | Lawful basis | How long we keep it |
|---|---|---|
| Account | Contract (Art 6(1)(b)). There is no account to sign in to without it. | For as long as you have the account. Deleting the account deletes it. |
| What you create | Contract (Art 6(1)(b)). Keeping it and giving it back to you is the thing you signed up for. | Until you delete it, or until you delete your account, whichever happens first. |
| Billing | Contract (Art 6(1)(b)), and legal obligation (Art 6(1)(c)). Contract, because we cannot give you the plan you paid for without knowing which one it is. Legal obligation, because UK tax law makes us keep the records behind our own returns. | The subscription record lasts as long as the account. What has to appear in our own business records is kept for as long as tax law requires, which is longer than the account lasts. |
| Support | Legitimate interests (Art 6(1)(f)). Our interest in answering the question you actually asked, and in being able to check afterwards what was said. You can object to this one. | 24 months from the date of the message, and then deleted. |
| Logs | Legitimate interests (Art 6(1)(f)). Our interest in keeping the service up, and in finding out what went wrong when it is not. You can object to this one. | 12 hours on this website, which is our hosting provider's own window rather than a setting of ours. We do not extend it and we do not copy log lines into any store of our own. Each service states its own. |
Where the basis is legitimate interests, you can object, and the rights section below says how. Where it is contract, we cannot run the account without it, so the way to stop that processing is to close the account.
A service can hold more than these five categories, because this notice describes them at the level that is true of every service. Where a service holds something else, its schedule lists it and gives it a basis of its own.
How AI models see your content
Our services work by sending what you write, along with the state the service is keeping for you, to a large language model provider, which generates a response. That provider receives your content. Which provider it is depends on the service, and each service's sub-processor list names it and says what it receives.
We do not use your content to train models. The providers apply their own retention policies to what reaches them.
Who else processes your data
Running any of this means other companies handle data on our behalf: hosting, databases, model providers, payments and email. Each service publishes a named, dated list of its own, and the company-level processing behind this website and the support inbox is listed on our sub-processor page.
We do not sell personal data, and we do not share it for anyone else's marketing.
Where your data goes
Where it physically sits is on the sub-processor page, per company. At company level this website is served from France and our mail is stored in the United Kingdom. France is in the EEA, which the UK treats as offering equivalent protection, so that leg needs no separate safeguard and the mechanism below is not what covers it.
Some of those companies process data outside the UK and EEA. The mechanism we rely on for those transfers: The European Commission's 2021 Standard Contractual Clauses, together with the Information Commissioner's international data transfer addendum for transfers out of the UK. Both are incorporated into the data processing agreements we have with the companies listed above rather than negotiated separately. Each service's sub-processor list records where that service's vendors process data.
Cookies on this website
This website sets no cookies and runs no analytics. It is a set of static pages: there is no sign-in, nothing to track, and no third-party script on it. Fonts are served from this domain rather than fetched from a font provider when you visit.
The services themselves are different, because signing in requires a session. Each service describes its own cookies in its schedule.
Your rights
Under UK data protection law you can ask for a copy of your personal data, ask us to correct it, ask us to delete it, ask for it in a portable form, and object to or ask us to restrict how we use it.
Where a service gives you a button for one of these, its schedule names it, and using the button is faster than writing to us. Where there is no button, email support@nightshiftsoftware.co.uk and we will handle it as a rights request. We will not charge you for it, and we will respond within one month.
If you think we have handled your data badly, please tell us first, but you can complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk.
Changes
When this notice changes we update the date at the top. For a change that affects how we use data you have already given us, we will email you rather than rely on you re-reading this page.