Privacy policy

Last updated 21 October 2026

Who we are

NightStash is operated by NIGHTSTASH PTE. LTD. (UEN 202647952N), a company registered in Singapore. In this policy, "NightStash", "we" and "us" mean NIGHTSTASH PTE. LTD..

This policy explains what personal data we collect when you use nightstash.net and the NightStash bottle banking service at our partner venues, why we collect it, and the choices you have. We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).

What we collect

  • Contact details: your name, mobile number and email address, given by you or entered by venue staff when they store a bottle for you.
  • Bottle records: the bottles you store, the venue and section, storage, redemption and expiry dates, and the staff member who handled each action.
  • Sign-in data: one-time login codes and a session token that keeps you signed in.
  • Messaging preferences: which notifications you want by email or WhatsApp, and when you agreed to or opted out of WhatsApp messages.
  • Venue and billing data (venue partners only): venue details, staff accounts and subscription status. Card payments are handled by Stripe; we never see or store full card numbers.

How we use it

  • To store, track, extend and return your bottles at participating venues.
  • To sign you in with a one-time code sent by email or WhatsApp.
  • To send service messages about your bottles: storage confirmations, expiry reminders, extensions and redemptions.
  • To keep an audit trail of every bottle action, so venues and customers can resolve disputes.
  • To bill venue partners for their subscription.

We do not sell your personal data, and we do not use it for third-party advertising.

WhatsApp messages

We send WhatsApp messages through the WhatsApp Business Platform operated by Meta. We only send bottle updates on WhatsApp after you agree to receive them, for example when venue staff ask you at the counter. Login codes are sent on WhatsApp only when you request one.

You can stop WhatsApp updates at any time by replying STOP to any of our messages, or by switching WhatsApp off in your notification settings. Reply START to turn them back on.

Who we share it with

We share personal data only with the venue that stores your bottle, and with service providers that run parts of NightStash on our behalf:

  • Vercel (website hosting) and Neon (database hosting)
  • Resend (email delivery)
  • Meta Platforms (WhatsApp message delivery)
  • Stripe (venue subscription payments)

Some of these providers store data outside Singapore. Where that happens, we rely on them to protect it to a standard comparable to the PDPA. We may also disclose data where the law requires it.

Cookies

We use a single sign-in cookie and your browser's local storage to keep you logged in. We do not use advertising or analytics cookies.

How long we keep it

We keep bottle records and their audit trail for as long as your account is active and for a reasonable period afterwards so venues can resolve disputes, then delete or anonymise them. You can ask us to delete your account at any time.

Your choices and rights

You can ask us to access or correct your personal data, withdraw consent for a purpose, or delete your account. Email contact@nightstash.net and we will respond within 30 days. Withdrawing consent may mean we can no longer provide parts of the service, for example storing bottles under your name.

Contact

Questions about this policy or your data go to our Data Protection Officer at contact@nightstash.net.

NIGHTSTASH PTE. LTD., UEN 202647952N, Singapore.

Changes

We may update this policy as the service changes. The date at the top shows when it was last updated.