The short version
Silent Night is private software run by the Silent Night team for our clients. Your data is seen by our team and no one else. It is never sold, never shared with other clients, and never used for anything outside your engagement with us.
01Who can see your data
Only named members of the Silent Night team. Silent Night has no customer logins at all: clients never create accounts, and there is nothing for a client to sign into. Team access is limited to an approved list of consultants, and account creation is disabled at the database level, so even someone who found the sign-in page could not register themselves.
When we show the software publicly, on this site or in printed material, every figure is a made-up composite venue. We do not use client numbers in marketing, demos, or sales conversations with anyone else.
02What we collect
- Sales reports from your point of sale (Toast, Square, or similar): nightly totals, category mixes, discounts, voids, and guest counts, delivered by you or by your POS's scheduled report email.
- Licenses and permits you ask us to track: photos of wall licenses, their numbers and expiration dates.
- Business contact details: the venue's address, the owner or manager we work with, and your targets.
- Mobile numbers, only for people who choose to receive Silent Night by text.
- Public information about your venue and market: your published events calendar, public reviews, and competitor information that anyone can see.
What we never receive
No customer names, no card numbers, no payment details. Toast and Square strip cardholder data before any report leaves their systems, and we have no access to your payment processing.
03How it is stored
Client data lives in a dedicated cloud database (Postgres, hosted by Supabase on AWS infrastructure in the United States). It is encrypted in transit and at rest, backed up automatically, and protected by row-level security rules enforced by the database itself, not just by the application. Documents such as license photos sit in private storage that requires an authenticated team login.
Each client's inbound report address contains a private token unique to that business, so only mail sent to your exact address can file data to your account.
04Accountability
Every edit anyone on our team makes, to client details, licenses, events, or alert resolutions, is written to a permanent change log recording who changed what and when. That log cannot be edited or deleted by anyone, including us. If a client ever asks who touched their data, the answer is on file.
05Service providers
We keep the list short. Supabase (on AWS) hosts the database and storage; their infrastructure is SOC 2 Type II certified. Resend delivers our report emails. Twilio delivers our text messages. Netlify hosts this website, which contains no client data. None of these providers use your data for their own purposes, and no analytics or advertising trackers run on client information.
06Retention and deletion
We keep your data for as long as we work together, because the value of Silent Night is history: your nights compared against your own baselines. If the engagement ends, we will delete your data on request and confirm when it is done.
07Text messages
If you choose to receive Silent Night by text, we use your mobile number only to send you your recaps and alerts. Mobile numbers and text opt-in information are never sold or shared with third parties or affiliates for marketing or promotional purposes. Reply STOP to any message to opt out, or HELP for help. Message and data rates may apply. See the text message terms.
Questions about any of this? Ask the people who run it. We answer the phone.
Request an invitation