ought
Features Pricing Log in Request access

Privacy Policy

Last updated: April 3, 2026

1. Information We Collect

Account information: Email address, organization name, and plan selection when you create a tenant.

Waiting room data: Queue tickets, session information, and event logs are stored in your tenant's isolated database. This data is not shared with other tenants.

Waitlist submissions: Email, company name, and use case description when you request beta access.

Usage data: Request counts, error rates, and queue metrics for operational monitoring.

2. How We Use Your Information

We use your information to: (a) provide and operate the waiting room service; (b) communicate with you about your account; (c) monitor and improve service reliability; (d) comply with legal obligations.

3. Data Isolation

Each tenant receives a dedicated database (Cloudflare D1). Your queue data, theme configuration, event logs, and bypass rules are stored in your isolated database and are not accessible to other tenants.

4. Data Processing Location

Data is processed at Cloudflare's edge locations globally. Queue data is stored in Cloudflare D1 databases in the region closest to the initial provisioning request.

5. Data Retention

Queue tickets are archived after 24 hours and permanently deleted after 30 days. Event logs are retained for the duration of your account. Account data is deleted 30 days after account termination.

6. Third Parties

We use Cloudflare as our infrastructure provider. We do not sell, rent, or share your personal information with third parties for marketing purposes.

7. Security

We use AES-256-GCM encryption for stored credentials, HMAC-SHA256 for session tokens, and TLS for all data in transit. API keys are stored as salted hashes. The platform has undergone multiple independent security audits.

8. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at our contact page. We will respond within 30 days.

9. Changes

We may update this policy with 30 days' notice via email to account holders.

10. Contact

Privacy inquiries: Contact us.

ought

The fairest waiting room on the internet.

Product

Features Pricing Request access

Resources

Support Contact sales

Legal

Terms Privacy

© 2026 Ought. All rights reserved.