Privacy Policy

Last updated: April 17, 2026

Waitly ("we", "our", or "us") operates the website at getwaitly.com. This policy explains what data we collect, why we collect it, and how we handle it.

1. Information We Collect

Account data: When you sign up we collect your email address and, if you use GitHub OAuth, your name and GitHub profile information.

Waitlist subscriber data: When end-users join a waitlist you create, we store their email address on your behalf. You are the data controller for your subscribers; we process that data as a data processor.

Payment data: Billing is handled by Lemon Squeezy. We do not store your card details. We receive confirmation of your subscription status from Lemon Squeezy via webhook.

Usage data: We may log standard web server information such as IP addresses and request metadata through Cloudflare for security and reliability purposes.

2. How We Use Your Information

  • To provide and operate the Waitly service
  • To send transactional emails (waitlist confirmations, referral links)
  • To send broadcast emails you initiate to your subscribers
  • To process payments via Lemon Squeezy
  • To respond to support requests

3. Data Sharing

We do not sell your personal data. We share data only with the following third-party services that are necessary to operate the platform:

  • Lemon Squeezy — payment processing
  • Resend — transactional and broadcast email delivery
  • Neon — database hosting (PostgreSQL)
  • Cloudflare Workers — application hosting

4. Data Retention

We retain your account data and your waitlist subscriber data for as long as your account is active. You may request deletion at any time by contacting us (see below). Unsubscribed waitlist subscribers are retained in your list for your records but are excluded from future broadcast emails.

5. Your Rights

Depending on your location you may have rights to access, correct, or delete the personal data we hold about you. To exercise these rights, contact us at the email below.

Your waitlist subscribers can opt out of broadcast emails at any time by clicking the unsubscribe link included in every email.

6. Cookies

We use a session cookie to keep you signed in. We also set a short-lived referral cookie (ref_code) to track referrals when a visitor arrives via a referral link. We do not use advertising or tracking cookies.

7. Security

We take reasonable measures to protect your data, including encrypted connections (HTTPS), secret management via Cloudflare Workers secrets, and hashed passwords. No method of transmission over the internet is 100% secure.

8. Changes

We may update this policy from time to time. We will post the updated policy on this page with a new effective date.

9. Contact

For privacy questions or data requests, contact us at contact@aymaneonline.dev.