Last updated: May 2026
Account data: When you create an account, we collect your email address, full name, and password (stored as a secure hash). If you sign in with Google, we receive your email address and profile name from Google.
Usage data: We automatically collect information about how you use the Service, including pages visited, features used, actions taken, timestamps, IP addresses, browser type, and device information.
Waitlist and subscriber data: We store the waitlists you create and data about your subscribers — including their email addresses, referral codes, signup timestamps, and any custom field values you configure. This data is collected on your behalf; you are the data controller for your subscribers' information.
Payment data: Billing information is collected and processed by Lemon Squeezy, our payment processor. We do not store your full payment card details. We receive limited transaction metadata (subscription status, billing dates, amounts) from Lemon Squeezy.
Communications: If you contact us by email, we retain the correspondence to respond to your inquiry and improve our service.
We use the information we collect to:
We do not sell your personal information or your subscribers' data to third parties.
Your data is stored using Supabase, a managed database platform hosted on AWS infrastructure in the United States. Subscriber data, waitlist configurations, and account information are all stored within Supabase's secured environment.
CV and resume files uploaded through the Hiring Mode (talent discovery) feature are stored in Supabase Storage (private bucket) and are only accessible via time-limited signed URLs. Promotional media — images and videos uploaded to waitlist pages — are stored in public Supabase Storage buckets. Waitlist thumbnail images are stored in a separate public bucket.
We implement appropriate technical and organizational measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
We use the following third-party services that may process your data:
Each of these providers has their own privacy policies governing how they handle data. We encourage you to review them.
Waitlist OS uses cookies and similar technologies to operate the Service. Specifically, we use session cookies to maintain your logged-in state (managed by Supabase Auth). These are essential for the Service to function.
We do not use advertising or tracking cookies. We do not serve third-party ads. Cloudflare Turnstile may set a cookie as part of its bot protection functionality.
You can configure your browser to refuse cookies, but this may prevent some features of the Service from working correctly.
We retain your account data and waitlist data for as long as your account is active. If you close your account, we will delete your personal data and waitlist data within 90 days, except where we are required to retain it for legal, compliance, or dispute resolution purposes.
Subscriber data you have collected through your waitlists is deleted when you delete the waitlist or close your account. You may export your subscriber data as a CSV at any time before deletion.
Billing records and transaction history are retained for a minimum of 7 years as required by financial regulations.
Depending on your location, you may have the following rights regarding your personal data:
If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR. To exercise any of these rights, contact us at hello@waitlistos.com. We will respond within 30 days.
You may also delete your account and associated data directly from your account settings at any time.
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@waitlistos.com and we will delete that information promptly.
Users must be at least 13 years old to create a Waitlist OS account. By creating an account, you represent that you are 13 years of age or older.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice within the Service. The "last updated" date at the top of this page reflects when changes were most recently made. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
Email: hello@waitlistos.com
See also our Terms of Service and Refund Policy.