Security
Your data’s security is a first-class concern. We collect the property details and contact information you provide, plus a TCPA consent record — and we protect all of it with layered safeguards. Here’s how, and how to report a concern.
How we protect your data
- Encryption in transit (TLS/HTTPS) and at rest for the data we store.
- Least-privilege access controls; staff access is restricted and logged.
- Vendor oversight — lending and consent partners are vetted and bound by contract.
- Consent-record integrity — TCPA consent is captured with a TrustedForm certificate and retained append-only (write-once), so it can’t be altered after the fact.
- Monitoring and logging for suspicious activity.
- Regular review of dependencies and configuration; secrets are isolated from the web tier.
- Security-minded engineering practices and staff awareness.
- PII is minimized in analytics — aggregate benchmark data is stripped/hashed before it lands.
This describes our security posture at a high level and is not a guarantee; no method of transmission or storage is 100% secure. We review and harden our controls on an ongoing basis.
Responsible disclosure
If you believe you’ve found a security vulnerability, please report it to security@nightyield.com. We welcome good-faith research, will acknowledge reports, and ask that you avoid accessing other users’ data or degrading the service while testing.
What you can do
- We are not a call center and will not cold-call you out of the blue — be cautious of anyone claiming to be us who does.
- Only submit your information on our own pages (nightyield.com).
- Report anything suspicious to security@nightyield.com; exercise privacy choices any time via Your Privacy Choices.
Frequently asked questions
Is my data encrypted?
Yes — in transit via TLS/HTTPS, and at rest for the data we store. Sensitive consent records are retained write-once so they cannot be altered.
Do you sell my data?
No. With your consent we share your lead with the STR lending/marketing partners disclosed at the form to provide the service you requested; we don’t sell it for cross-context advertising and we honor Global Privacy Control. See Do Not Sell or Share.
How do I report a security concern?
Email security@nightyield.com. For suspected misuse of your information, also use our Your Privacy Choices hub to opt out and request deletion.
Related