This Privacy Policy explains how WAITLY ("we", "us") collects, uses, and protects information when you visit our website, create an account, or use our platform — and what happens when restaurant guests scan a table QR code. We keep it plain: we collect what we need to run the Service, and we do not sell personal data.

1. Information We Collect

Account information — name, email address, phone number, restaurant name, and billing details you provide when signing up or subscribing.
Venue configuration — zones, tables, request types, staff names and roles, and paired device identifiers that you set up in your dashboard.
Service request data — the table, request type, timestamps, and handling status of each guest request (see Section 8 for what this means for guests).
Usage and technical data — log data such as IP address, browser type, pages visited, and actions taken in the product, used for security and troubleshooting.
Communications — messages you send us via the contact form, email, or support channels.

2. How We Use Information

To provide, operate, and maintain the Service — routing requests, powering the live board, and generating reports.
To manage accounts, subscriptions, billing, and free trials.
To respond to support requests and communicate service updates.
To monitor performance, prevent abuse, and keep the Service secure.
To improve the product based on aggregated, de-identified usage patterns.

3. Cookies and Sessions

We use cookies and similar technologies that are necessary for the Service to work — for example, keeping you signed in, remembering language and currency preferences, and protecting forms against cross-site request forgery. You can control cookies through your browser settings, but disabling essential cookies may prevent parts of the Service from functioning.

4. Analytics

We may use analytics tools (such as Google Analytics, where enabled) on our marketing website to understand how visitors find and use it — for example, which pages are viewed and which buttons are clicked. This data is used in aggregate to improve our website and is not used to build profiles of individual guests of your restaurant.

5. Sharing of Information

We do not sell personal data. We share information only with:

Service providers that help us operate the platform (such as hosting, payment processing, and email delivery), bound by confidentiality obligations and only for the purposes described here;
Your restaurant — request data belongs to the venue where it was created and is visible to that venue's authorized users;
Legal authorities when required by law, or to protect the rights, safety, or property of WAITLY, our customers, or others;
A successor entity in the event of a merger, acquisition, or asset sale, subject to this policy.

6. Data Retention

We keep account information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. Service request data is retained according to your plan's reporting storage period so your reports keep working, then deleted or aggregated. When an account is closed, we delete or anonymize associated personal data within a reasonable period, except where retention is required by law.

7. Security

We use administrative, technical, and organizational safeguards appropriate to the nature of the data — including encrypted connections (HTTPS), hashed passwords, role-based access within your venue, and per-device pairing codes for watch terminals. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if we learn of a breach affecting your personal data, we will notify you as required by applicable law.

8. Guests Who Scan a Table QR Code

Guests never need an account, an app, or a signup to use WAITLY in a restaurant. When a guest scans a table's QR code and taps a request:

We record the table, the request type (for example "call waiter" or "bill"), timestamps, and how the request was handled — not the guest's name or contact details, which we never ask for.
This request data is stored on behalf of the restaurant and appears in that restaurant's live board and response-time reports.
Standard technical data (such as IP address) may appear in server logs for security purposes and is not used to identify or profile guests.

9. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. Account holders can update most information directly in the dashboard; for anything else, contact us using the details below and we will respond within the timeframe required by applicable law. If you believe we have not addressed your concern, you may lodge a complaint with your local data protection authority.

10. Changes and Contact

We may update this Privacy Policy from time to time; material changes will be reflected in the effective date above and communicated where appropriate. Questions or requests about your data? Contact us at hello@waitlyapp.com or through the contact page.

Privacy Policy