Security and data access
Nightclerk answers email from your code and your data, so the first question is what it can touch. The short answer: it can read what you choose, it cannot write, and nothing goes out until you approve it.
Last updated
On this page
The short version
- Read-only. Nightclerk reads your codebase and database. It has no way to change either.
- You choose the scope. You pick the repositories and supply the database credentials.
- You approve everything. No email is sent and no action runs until a person says so.
Your email
Nightclerk connects to Gmail through Google sign-in (OAuth), so you never give us your password, and you can remove the connection from your Google account at any time. Send-as aliases are supported, so replies can go out from the address your customers already write to.
Gmail is supported at launch. Outlook and generic IMAP are coming.
Besides the email that arrives, Nightclerk reads the replies you have already sent, so that drafts sound like you. Those replies are read as reference while a draft is written. They are not used to train a model.
Nightclerk drafts replies. It does not send them. Every draft waits for you in the dashboard or the phone app, where you can edit it before it goes out.
Your codebase
Access to code goes through a read-only GitHub App. When you install it, you pick which repositories it can see. It cannot push commits, open pull requests or change settings. When Nightclerk thinks your site or code should change, it tells you; making the change is up to you.
Your database
You connect a database with read-only credentials that you create. We do not rely on those credentials alone. Nightclerk enforces read-only on its own side as well:
- only SELECT queries are allowed;
- every query runs in a read-only transaction;
- queries have a timeout;
- results have a row limit.
Postgres is supported first. MongoDB and ClickHouse may come later.
Actions in Stripe
Nightclerk can prepare an action that resolves a request, such as a refund in Stripe. A prepared action is not a performed one. It waits with the draft, and it runs only when you approve it.
Stripe is the only integration at launch.
Where you review
Drafts are reviewed in the web dashboard or in the phone app, which is on iOS first. The phone app can do everything the dashboard can: read, edit, approve and send.
Questions
Nightclerk is pre-release, and this page will grow as the product does. If something you need to know is not here, write to [email protected]. For how this website handles your own data, see the Privacy Policy.