Privacy Policy
Last updated: February 2026
1. Information We Collect
We collect information in the following ways:
- Account Information: When you sign up using Google or GitHub OAuth, we receive your name, email address, and profile picture from your chosen provider.
- Project Data: Information about the waitlist projects you create, including project names, configurations, and design settings.
- Subscriber Data: Email addresses and any additional information collected from users who sign up for your waitlists.
- Usage Data: Information about how you interact with our service, including pages visited and features used.
2. Third-Party Services
WaitFast uses the following third-party services to operate:
- MongoDB: Database storage for all user and project data
- Resend: Email delivery service for sending bulk emails to your subscribers
- Google OAuth: Authentication provider for Google sign-in
- GitHub OAuth: Authentication provider for GitHub sign-in
- Polar: Payment processing for subscriptions
Each of these services has their own privacy policy governing how they handle data.
3. How We Use Your Information
We use collected data to:
- Provide, maintain, and improve our services
- Process your transactions and manage your account
- Send you technical notices, updates, and support messages
- Respond to your comments and questions
- Analyze usage patterns to improve user experience and develop new features
- Protect against fraudulent or unauthorized activity
4. Data Sharing
We do not sell your personal information. We may share data with third-party service providers who assist in operating our service (as listed above). We may also disclose information if required by law or to protect our rights, safety, or property.
5. Your Rights
You have the following rights regarding your data:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and associated data
- Export: Download your subscriber data as CSV at any time through your dashboard
- Portability: Request your data in a machine-readable format
To exercise these rights, please contact us through our support channels.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit using HTTPS and secure storage practices. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
7. Cookies
We use essential cookies to maintain your session and authenticate your account. These cookies are necessary for the service to function properly. We do not use tracking cookies for advertising purposes.
8. GDPR Compliance
For users in the European Economic Area (EEA), we process data based on legitimate interests, contractual necessity, and your consent. You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
9. CCPA Compliance
For California residents, you have the right to know what personal information we collect, request deletion of your data, and opt-out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us through our support channels.
10. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes. Subscriber data you collect is retained until you delete it or your account is terminated.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Your continued use of WaitFast after changes constitutes acceptance of the updated policy.
12. Contact
If you have questions about this Privacy Policy or how we handle your data, please contact us through our support channels.