Privacy Policy

Last updated 17 September 2026

The short version. Nightly reads the guest messages in your Airbnb hosting inbox so it can write replies for you to approve. To do that it sends the guest's message and the facts you told it about your place — and nothing else — to one AI company that writes the draft. It never learns your Airbnb password, never looks at any other tab or site, and never sells or shares anything with advertisers. One button deletes the lot.

What Nightly collects

Only what it needs to draft a reply. Every row below exists because some part of the product would not work without it.

What	Why	Where it lives
Your email address and name, from Google sign-in	So your queue is yours, and so we can reach you about your account	Our servers
From your hosting inbox: the guest's display name (usually a first name), the stay dates as Airbnb shows them, whether the thread is an inquiry or a booking, and the text of messages in threads Nightly drafts for	A reply cannot be written without the question	Our servers, and sent to our AI provider to write each draft
The facts you type about your place — check-in and check-out times, Wi-Fi, parking, rules, and anything else you add	These are the only facts Nightly may state to a guest	Our servers, and sent with each draft request
Your door or gate code, if you choose to save one	Only to put into an arrival message for a confirmed stay	Encrypted on our servers. Never sent to the AI provider, in any message, ever
Your settings: which messages may send themselves, the confidence level you set, the name you sign replies as, and whether you are paused	They decide what Nightly is allowed to do	Our servers
Billing: a Stripe customer and subscription reference, your plan, and when it renews	To charge you, and to know whether you are a paying customer	Stripe holds the payment details. We never see your card number
The audit log: every draft proposed, approved, edited, rejected, sent or refused, with the reason	It is the product. You can read yours any time under History	Our servers
A hashed sign-in token per browser, and that browser's user-agent string	To keep you signed in, and to let you see which browsers are connected	Our servers. Only the hash is stored, so a database dump is not a set of logins

What Nightly never collects

Your Airbnb password. Nightly works inside the Chrome you are already signed into. There is nowhere to type an Airbnb password and nothing that would accept one.
Any other tab, site, or your browsing history. The extension runs only on airbnb.com/hosting/messages pages. It cannot see anything else.
Your guests' contact details or payment information. Airbnb does not show them to you, and Nightly does not go looking.
Your calendar. Nightly could once store a calendar feed URL. Nothing read it, so we removed it. Stay dates come from the inbox rows your browser already displays.
Anything for advertising. No ad networks, no trackers inside the extension, no profiles sold or shared.

Who else sees your data

Three companies, each doing one job:

Anthropic writes the drafts. It receives the guest's message, your house facts, and the reply it produces. Anthropic states that inputs and outputs from its commercial API are not used to train its models by default. Your door code is never included.
Stripe handles payment. If you subscribe, Stripe collects your payment details directly — they never pass through Nightly.
Google handles sign-in. We receive your email address and name; Google receives nothing about your guests.

Nobody else. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we have no advertising business to sell it to.

Limited use of Chrome Web Store data

Nightly's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Specifically:

Data is used only to provide and improve the single purpose of drafting Airbnb guest replies for your approval.
Data is transferred only to the providers listed above, and only as needed to run that feature, comply with the law, or protect against fraud and abuse.
Data is never used or transferred to serve advertising, including personalised, re-targeted or interest-based advertising.
No human at Nightly reads your data, except where you have asked us to — for example when you report a problem — where the law requires it, or for a security investigation.

How long it is kept, and how to end it

Your data stays while your account does. Under Plan → Delete everything in the Nightly queue, or from the extension's settings, one confirmation erases your house facts, your door code, every draft, every scheduled message, your listings, your sign-in sessions and your entire audit log from our servers. If you have a subscription it is cancelled first, so deleting your account can never leave you being charged for it. The deletion is immediate and cannot be undone, and your Airbnb account is untouched.

Ordinary server logs — which record that a request happened and roughly from where, but not what was in it — are kept for up to 30 days.

Security

Everything travels over HTTPS. Your door code is encrypted with AES-256-GCM before it is written down, and is decrypted only at the moment an arrival message is built. Sign-in tokens are stored as hashes. Every row in our database is tied to one account, and every query is filtered by the account that asked for it.

We are a small operation, and we would rather say that plainly than imply a security team we do not have. If you find a problem, write to hello@nightlyhost.com and a person will answer.

Your rights

Wherever you live, you can see everything we hold about you — it is in the app — correct it, and delete it, without asking us, without waiting, and without being charged. If you are in California, the EU or the UK you have further rights under the CCPA/CPRA, the GDPR or the UK GDPR; write to us and we will honour them. We will not treat you differently for exercising any of them, because there is nothing to withhold: the delete button is the same one we would use.

Children

Nightly is for people who host on Airbnb, which requires you to be 18. It is not directed at children and we do not knowingly collect anything from them.

Changes

If we change what we collect or who sees it, we will say so here with a new date and tell you inside the app before the change takes effect — not quietly, and not only in a changelog.