Privacy Policy

Who we are

Nightloom OS is a loyalty and customer-engagement platform owned and operated by Nightloom Roasters, a registered business in Pakistan. This policy explains what information Nightloom OS collects, how it is used, and the choices available to café guests and our partner businesses.

Nightloom OS is used by cafés and restaurants ("partner businesses") to run loyalty programs for their customers ("guests"). In most cases the partner business is the owner of its customer data, and Nightloom Roasters processes that data on its behalf to operate the service.

Information we collect

• Customer phone numbers — used to identify a guest's loyalty account.
• Loyalty, transaction & reward data — stars earned, tier, rewards redeemed, and the purchase information used to award them.
• Basic account & usage data — information needed to provide the staff app and owner dashboard to partner businesses.
• Contact & demo-request details — when you submit a form on this website (for example, a demo request), the name, email address, café/business name, city and any message you provide. We use these solely to respond to your enquiry and are processed on our behalf by our form-delivery provider.

WhatsApp number verification

Guests can prove a phone number is theirs by sending one WhatsApp message to the Nightloom OS WhatsApp number — for example when joining a café's rewards online, resetting a PIN, or changing their number. When you do:

• What we receive — WhatsApp (Meta) delivers your message to us with your WhatsApp number and a message ID.
• What we keep — only what the check needs: a one-way hash of the code, whether it matched, and the message ID so the same message is never processed twice. We do not store the text of your message, and we don't keep your number in that record in readable form. These records are deleted after 30 days.
• What we send — one short reply in the same chat saying whether the check worked. We never send you marketing messages on WhatsApp through this feature.
• Why — to make sure only the person who holds a phone number can use it to join, sign in to, or change a loyalty account.

WhatsApp is operated by Meta; its own privacy policy applies to your use of WhatsApp.

How we use information

• To operate the loyalty program — identifying guests, awarding stars, managing tiers and rewards.
• To provide partner businesses with analytics, customer segmentation and AI-assisted insights about their own customers.
• To send loyalty email notifications — such as reward unlocks, expiry reminders and win-back — to guests.
• To maintain, secure and improve the service.

Data storage & protection

We store customer and loyalty data using reputable cloud infrastructure and apply access controls and reasonable technical and organisational measures to protect it against unauthorised access, loss or misuse. Access is limited to what is needed to operate the service.

Data retention

We retain customer and loyalty data for as long as needed to operate the loyalty program for the relevant partner business, and as required for legitimate business or legal purposes. When data is no longer needed — for example, if a partner business ends its use of Nightloom OS — it is deleted or anonymised within a reasonable period, subject to any legal retention requirements.

Data ownership

The partner business (the café or restaurant) owns its customer data. Nightloom Roasters processes that data to provide the service and does not sell it. A partner business may request export or deletion of its customer data, subject to legal and operational constraints.

Guest rights & choices

Guests may request access to, correction of, or deletion of their personal data, and may opt out of loyalty communications at any time. Requests relating to data held on behalf of a specific café may be directed to that café or to us using the contact below.

Contact for data requests

For any privacy questions or data requests, contact us at hello@nightloomos.com. Nightloom Roasters · Pakistan.

To have your data deleted, see how to request deletion.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.