Privacy
> 1. Data Collection
We collect: (a) information you provide (name, email, job descriptions); (b) usage data (pages visited, features used); (c) payment information (processed by Lemon Squeezy and Mercado Pago — we never store card numbers).
> 2. Data Use
Your data is used to: (a) generate websites and screen candidates; (b) improve our AI models; (c) communicate with you about your account; (d) comply with legal obligations.
> 3. Data Security
We use HashiCorp Vault for encryption, Merkle audit chains for immutability, and SOC 2-grade security controls. All data is encrypted at rest and in transit.
> 4. HR Data (Ava HR)
Candidate data submitted to Ava HR is: (a) processed only for screening purposes; (b) not used to train AI models; (c) encrypted with per-tenant keys; (d) deletable upon request (GDPR right to erasure).
> 5. GDPR Rights
If you are in the EU/EEA, you have the right to: access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. Contact support@waitdead.com.
> 6. Cookies
We use essential cookies (session, locale preference) and an analytics cookie for referral tracking (ava_ref, 30-day expiry). No third-party tracking.
> 7. Data Retention
Account data is retained while your account is active. Generated sites are retained for 90 days after account deletion. Audit logs are retained for 365 days per SOC 2 requirements.
Last updated: March 2026