Privacy Policy

BuzzList (“BuzzList,” “we,” “us,” or “our”) provides a hosted waitlist platform that helps creators collect signups, manage referrals, and notify subscribers. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using BuzzList you agree to this Privacy Policy and our Terms of Service.

This policy covers two groups of people:

• Account holders — people who sign up for a BuzzList account to create and manage waitlists.
• Waitlist subscribers — people who join a waitlist hosted by a BuzzList account holder. If you joined a waitlist, the account holder is the controller of your data and you should also review their own privacy notice.

Information you provide

• Account information: your name and email address when you create an account.
• Waitlist content: waitlist names, slugs, branding (logos, colors, copy), and settings you configure.
• Subscriber data you collect: email addresses, optional names, and referral relationships of people who join your waitlists.
• Billing information: if you upgrade to a paid plan, payment details are collected and stored by Stripe. We receive limited billing metadata (plan, status, last four digits of the card, invoice history) but do not store full card numbers.

Information collected automatically

• Log and device data: IP address, browser type, referring page, and timestamps when you visit BuzzList or submit a waitlist signup.
• Cookies: we use strictly-necessary cookies to keep you signed in and to protect against abuse. We do not use third-party advertising cookies.
• Abuse signals: rate limit counters and similar data used to prevent spam and automated abuse.

• To provide, maintain, and improve the BuzzList service.
• To authenticate you (we use magic-link sign-in delivered by email).
• To send transactional emails: magic-link sign-in, billing receipts, position updates, and waitlist invitations sent by account holders.
• To process payments and prevent fraud.
• To enforce our Terms of Service and protect against abuse.
• To respond to support requests and legal obligations.

We do not sell your personal information, and we do not use waitlist subscriber data to send marketing on our own behalf.

We rely on a small set of vendors to operate BuzzList. They only receive the information they need to perform their function:

• Vercel — application hosting and content delivery.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery (magic links, invites, position updates).
• Our managed database provider — storage of accounts, waitlists, and signups.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of BuzzList, our users, or others.

• Account and waitlist data is retained for as long as your account is active.
• If you delete your account, we delete or anonymize your personal data and any waitlists you own within 30 days, except where we are required to retain it (e.g., billing records under tax law).
• Waitlist subscribers can unsubscribe at any time using the link included in every email. Unsubscribing suppresses further emails; the account holder controls whether the underlying record is removed.

We use industry-standard safeguards including TLS in transit, encryption at rest with our hosting and database providers, scoped access controls, and rate limiting. No system is perfectly secure, and we cannot guarantee absolute security of data transmitted to or stored on BuzzList.

Depending on where you live (e.g., the EEA, UK, California), you may have the right to:

• Access, correct, or delete personal data we hold about you.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

Account holders can manage and export their data from the dashboard. Waitlist subscribers should contact the account holder who runs the waitlist they joined. You can also email us and we will route the request appropriately.

BuzzList is operated from the United States and our vendors may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

BuzzList is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the service or by email.

Questions about this policy or your data? Signed-in users can reach us from the in-app support page. Otherwise, email joshuakriese@gmail.com.