Privacy Policy

Last updated: July 19, 2026

1. What we store

Account data: your name, email, business name and settings. Client data you enter: names, contact details, service preferences and notes for the people on your waitlist. Usage data: basic technical logs needed to run and secure the service.

2. How it's used

Only to provide the service: showing you your waitlist, sending the offers and invitations you trigger, and processing your subscription. We don't sell data, and we never contact your clients for our own purposes.

3. Your clients' rights

For client data, you are the data controller and we are your processor. Clients can ask you to correct or delete their information — deleting a client in the app removes them from your list.

4. Processors we rely on

Supabase (database and authentication, hosted in the EU), Stripe (payments — we never see card numbers), Resend (transactional email) and Vercel (hosting). Each processes data only under contract and only to deliver their part of the service.

5. Security and retention

Data is encrypted in transit and at rest, and access is restricted per account with row-level security. We keep data for as long as your account exists; deleting your account removes your data from production systems within a reasonable period.

6. Your rights and contact

You can access, correct, export or delete your data. Data controller for account data is Tommachi AS, org. no. 914 824 680 MVA, Waldemars hage 6, 0175 Oslo, Norway. For anything privacy-related, contact support@mywaitlist.app.