Privacy Policy

1. Introduction

Your privacy is important to us at Waitlister. This Privacy Policy outlines how we collect, use, protect, and share information gathered from users of our website, https://waitlister.me/, and the Waitlister app.

2. Information We Collect

We collect personal information such as your name and email address when you create an account. We may also collect data related to your waitlist creation and management activities. This can include information on waitlists you create, participants who sign up, usage patterns within the app, API usage statistics, email sending activities, and IP addresses. We gather this information through fair and lawful means, with your knowledge and consent.

3. Log Data and Usage Monitoring

For security and service improvement purposes, we automatically collect and store information about your use of our services, including your IP address, browser type, referring/exit pages, date/time stamps, clickstream data, and the resources you access. We may also monitor and log your API usage and email sending patterns to ensure compliance with our Terms of Use and to prevent abuse.

4. How We Use Your Information

The information we collect is used to improve our service, provide customer support, communicate with you about your account, detect and prevent fraudulent or abusive use of our services, and enhance your user experience. We may analyze usage patterns and email activity to identify potential abuse and ensure the security of our platform. We store your data with commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

5. Protection of Information

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If we detect suspicious activities on your account that may indicate a breach or unauthorized use, we may temporarily suspend access to your account while we investigate.

6. Information Sharing

We do not share any personally identifying information publicly or with third parties, except in the following circumstances:

• When required by law
• When necessary for the operation of our services
• To protect our rights, privacy, safety, or property
• To investigate, prevent, or take action regarding potential abuse, illegal activities, or violations of our Terms of Use
• In connection with a business transfer, such as a merger, acquisition, or asset sale

7. Third-Party Services

Our app may use third-party services for functionality such as payment processing, email delivery, and analytics. These services may collect and process your information according to their own privacy policies. We recommend reviewing the privacy policies of these third parties. Our app may also link to external sites that are not operated by us. We have no control over the content and practices of these sites and cannot accept responsibility for their privacy policies.

8. Email Communications

If you use our service to send emails or notifications, we will process the recipients' email addresses solely for the purpose of delivering these communications. You are responsible for ensuring you have appropriate consent or legal basis to send communications to these recipients. We monitor email sending patterns to prevent spam, phishing, and other abusive practices.

9. Your Data Rights

Under GDPR and other data protection laws, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or limit the processing of your data.
• Request data portability (to receive your data in a common, machine-readable format).
• Withdraw consent at any time, where processing is based on consent.

You can exercise many of these rights directly through your account settings. For any other requests, please contact us at [email protected], and we will respond to your request in a timely manner.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. For example, we retain your account information for as long as your account is active. If you close your account, your data will be deleted in accordance with our standard procedures, typically within 90 days, unless a longer retention period is required for legal or security reasons. Data related to waitlist participants collected on your behalf is retained while the waitlist is active and may be deleted by you at any time. In case of account termination due to violations of our Terms of Use, we may retain certain information for a longer period as necessary to prevent repeated abuse.

11. GDPR Compliance and Our Roles

We act as both a "data controller" and a "data processor" under GDPR. We are the data controller for the personal information of our users (the account creators). We are the data processor for the personal information of the waitlist participants, which you collect through our services. As a user of our service, you are the data controller for your waitlist participants' data and are responsible for having a lawful basis to collect and process that information. We provide a Data Processing Agreement (DPA) to govern our relationship as a data processor.

The legal bases for processing your personal information include:

• Specific Consent: Where you have provided explicit, granular consent for a specific purpose (e.g., by ticking a box to receive marketing communications).
• Performance of the contract: To provide the services you have signed up for.
• Compliance with legal obligations: When we are required to do so by law.
• Legitimate interests: Such as improving our services, preventing fraud, and ensuring the security of our platform, provided these interests do not override your fundamental rights and freedoms.

12. California Privacy Rights

California residents may have additional rights regarding their personal information under the California Consumer Privacy Act (CCPA) and other state laws. Please contact us for more information about your California privacy rights.

13. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there. For transfers of personal data from the European Economic Area (EEA), the UK, and Switzerland, we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure that your data is protected in accordance with GDPR requirements.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date. You are advised to review this Privacy Policy periodically for any changes.

15. Your Choices

You are free to refuse our request for your personal information, understanding that we may be unable to provide you with some of your desired services. Your continued use of our app and website will be regarded as acceptance of our practices around privacy and personal information.

This policy is effective as of 20/07/2025.