Privacy Policy
Last updated: March 15, 2026
Who We Are
Welcomy is a queue management platform operated from Asuncion, Paraguay. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website at welcomy.io and use our waitlist service.
For any privacy-related inquiries, you can contact us at [email protected].
Data We Collect
When you join our waitlist, we collect the following information:
- Email address — provided directly by you
- Country — automatically detected based on your IP address via ipapi.co
- Language preference — based on the language version of the site you used (English or Spanish)
- Timestamp — the date and time of your registration
- Source — where you signed up from (e.g., "landing")
We do not store your IP address.
Cookies & Analytics
We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect anonymous usage data such as pages visited, time on site, and referral source.
When you first visit our site, a cookie consent banner will appear. Google Analytics is only loaded if you accept cookies. If you reject, no cookies are set and no analytics data is collected.
Your consent preference is stored in your browser's localStorage (key: wy_cookie_consent) — this is not a cookie and does not track you across sites.
We have enabled IP anonymization in Google Analytics, so your full IP address is never stored by Google.
You can change your cookie preference at any time by clearing your browser's localStorage or site data for welcomy.io.
How We Use Your Data
We use your data exclusively for the following purposes:
- To add you to our product waitlist
- To notify you when Welcomy launches or becomes available
- To understand the geographic distribution of interest in our product (aggregated, non-identifiable data)
- To provide you with content in your preferred language
We will never sell, rent, or share your personal data with third parties for marketing purposes.
Legal Basis for Processing
We process your personal data based on your explicit consent, which you provide when you voluntarily submit your email address to join our waitlist. You may withdraw this consent at any time by contacting us.
For IP-based country detection, we rely on our legitimate interest in understanding the geographic distribution of our potential users. The IP address is processed transiently and is not stored.
Data Storage & Third Parties
Your waitlist data is stored in Google Sheets via Google Apps Script (Google LLC). Google acts as our data processor and is subject to their Data Processing Agreement.
We use ipapi.co to detect your country from your IP address. This is a one-time lookup during registration — your IP is not stored by us. See ipapi.co Privacy Policy.
Data may be transferred to servers located in the United States (Google infrastructure). These transfers are protected by Standard Contractual Clauses and other appropriate safeguards.
Your Rights
You have the following rights regarding your personal data:
- Access — Request a copy of the data we hold about you
- Rectification — Request correction of inaccurate data
- Erasure — Request deletion of your data ("right to be forgotten")
- Portability — Receive your data in a machine-readable format
- Withdraw consent — At any time, without affecting prior processing
- Object — To processing based on legitimate interest
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
Unsubscribe & Data Deletion
Every email we send will include a one-click unsubscribe link. Opt-out requests are processed within 10 business days.
Please note that unsubscribing stops future emails but does not automatically delete your data from our records. To request complete data deletion, please email [email protected] with the subject "Data Deletion Request".
Data Retention
We retain your waitlist data until one of the following occurs:
- You request deletion of your data
- The Welcomy product launches and you are notified
- 12 months have passed since your registration without any product launch
After any of these events, your data will be deleted or anonymized within 30 days.
Security
We implement appropriate technical and organizational measures to protect your data, including:
- HTTPS encryption for all data in transit
- Access controls on our data storage (limited to authorized personnel)
- Email validation and duplicate detection to prevent abuse
In the event of a data breach affecting your personal data, we will notify you and relevant authorities within 72 hours.
Children's Privacy
Our service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected].
Applicable Law
This Privacy Policy is governed by the laws of the Republic of Paraguay, including Law 7593/2025 (Personal Data Protection Law) and its regulatory framework under the Agencia Nacional de Proteccion de Datos Personales (MITIC).
For users in the European Union/European Economic Area, the provisions of the General Data Protection Regulation (GDPR) also apply. For users in California, USA, the California Consumer Privacy Act (CCPA/CPRA) applies.
We do not sell your personal information as defined by the CCPA.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered waitlist members. The "Last updated" date at the top will always reflect the most recent revision.
Contact
For any questions, concerns, or requests related to this Privacy Policy, contact us at:
Welcomy
Email: [email protected]
Asuncion, Paraguay