Back to home

Privacy Policy

Last updated: April 14, 2026

1. Controller Identity

Waitless is a product of Cocuy Labs SpA, a company legally incorporated in Chile (RUT 78.352.448-1), with registered address at Badajoz 100, Of. 1014, Piso 10, Las Condes, Santiago, Chile. For all matters related to personal data, Cocuy Labs SpA acts as the data controller in the terms of Chilean Law No. 19.628 on the Protection of Private Life (Ley sobre Protección de la Vida Privada) and its amendments.

Contact for privacy matters: hello@cocuylabs.xyz

2. Data We Collect

We collect only what is necessary to provide the service:

  • Account data: Name, email address, and password (stored as a cryptographic hash — we never hold your plaintext password).
  • Restaurant and menu content: Business name, menu items, prices, images, and customization settings you configure inside the platform.
  • Subscription and billing data: Subscription plan, billing country, and transaction history. Payment card details are processed exclusively by Paddle (our payment provider) and are never stored on our servers.
  • Usage data: Authentication logs, feature interactions, and error reports used to operate and improve the service.
  • Technical data: IP address, browser type, and device information collected automatically when you access the platform.

3. Purpose and Legal Basis

We process your data for the following purposes:

  • To create and manage your account and provide access to the service.
  • To process subscription payments and issue receipts.
  • To send transactional communications (account verification, password reset, billing notices).
  • To detect and prevent abuse, fraud, or unauthorized access.
  • To improve the platform through aggregated, anonymized analytics.

Processing is based on the performance of the contract between you and Cocuy Labs SpA and, where applicable, on your consent. We do not sell your personal data to third parties under any circumstances.

4. Data Sharing and Sub-processors

We work with a limited set of sub-processors who assist in delivering the service. Each is bound by confidentiality obligations and may only process your data as instructed by us:

  • Supabase Inc. — Database, authentication, and file storage. Data is hosted in a region selected for performance and compliance.
  • Paddle.com Market Limited — Payment processing and subscription management. Paddle acts as the Merchant of Record for all transactions.
  • Vercel Inc. — Application hosting and content delivery.

We do not share your data with advertisers, data brokers, or any third party for marketing purposes.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and do not reactivate within 90 days, your account and associated data may be permanently deleted. Billing records required by Chilean tax law are retained for the period mandated by the Servicio de Impuestos Internos (SII).

6. Your Rights

Under Ley No. 19.628 and applicable Chilean law you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — request correction of inaccurate or incomplete data.
  • Deletion — request erasure of your personal data, subject to legal retention obligations.
  • Opposition — object to specific processing activities.
  • Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, send a written request to hello@cocuylabs.xyz from the email address associated with your account. We will respond within 15 business days.

7. Cookies and Tracking

The Waitless admin panel uses session cookies strictly necessary for authentication. We do not use advertising cookies or cross-site tracking technologies. The public landing page may use minimal first-party analytics to measure aggregate traffic.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), hashed password storage, and access controls limited to authorized personnel. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Changes to This Policy

We may update this policy periodically. Material changes will be notified by email or by a prominent notice in the platform at least 15 days before they take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

10. Governing Law and Jurisdiction

This policy is governed by the laws of the Republic of Chile. Any dispute arising from it shall be submitted to the jurisdiction of the ordinary courts of Santiago, Chile.

Questions? Contact us at hello@cocuylabs.xyz