Privacy Policy

1. Introduction

IndieWaitlist ("we", "us", or "our") operates the IndieWaitlist.com website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: When you create an account, we collect your name, email address, and password.
• Waitlist Data: Information about your waitlists including project names, descriptions, customization settings, and branding materials.
• Payment Information: Billing details processed securely through Stripe (we do not store full credit card numbers).
• Communications: Messages you send to us through contact forms or support channels.
• Subscriber Data: Email addresses and feedback submitted to your waitlists by visitors.

2.2 Information Automatically Collected

• Usage Data: Information about how you use our Service, including pages visited, time spent, and features used.
• Device Information: Information about your device, browser type, operating system, and IP address.
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience (see Cookie Policy section).
• Analytics Data: Website performance metrics and user interaction patterns.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Process your transactions and manage your account
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Generate analytics and insights about waitlist performance
• Provide AI-powered feedback analysis for your waitlists
• Prevent fraud and enhance security
• Comply with legal obligations
• Send marketing communications (with your consent)

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Personal Information

We do not sell, trade, or rent your personal information to third parties.

4.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Service:

• Payment Processing: Stripe for secure payment processing
• Email Services: Mailgun for transactional emails
• AI Services: OpenAI for feedback analysis and insights
• Analytics: Website analytics and performance monitoring tools
• Cloud Infrastructure: Hosting and data storage providers

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.4 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Employee training on data protection practices
• Secure payment processing through PCI-compliant providers

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account Data: Retained until you delete your account, then deleted within 30 days
• Waitlist Data: Retained for the duration of your account and 30 days after deletion
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Analytics: Aggregated data may be retained indefinitely for business purposes

7. Your Rights and Choices

7.1 Account Management

You can update your account information at any time through your account settings.

7.2 Data Access and Portability

You have the right to request access to your personal data and receive a copy in a portable format.

7.3 Data Correction

You can request correction of inaccurate or incomplete personal data.

7.4 Data Deletion

You can request deletion of your personal data, subject to certain legal limitations.

7.5 Marketing Communications

You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting us.

7.6 Cookies

You can control cookie preferences through your browser settings.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Cookie Policy

10.1 What Are Cookies

Cookies are small data files stored on your device that help us provide and improve our Service.

10.2 Types of Cookies We Use

• Essential Cookies: Required for basic site functionality and security
• Performance Cookies: Help us understand how visitors interact with our site
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Provide insights into site usage and performance

10.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling certain cookies may affect site functionality.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

13. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for processing your personal data includes:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: For business operations, security, and service improvement
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws and regulations

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your privacy rights