Privacy Policy

Effective 29 October 2026 · Waitline is operated by AppSage Infosystem Private Limited

1. Who we are

"Waitline", "we", "us" and "our" mean AppSage Infosystem Private Limited (CIN U74999KA2021PTC152976), a company incorporated in India, which owns and operates the Waitline website at https://waitline.appsage.in, the Waitline browser extension and related services (together, the "Service"). For personal data processed through the Service we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Contact details are in section 13 and on our Contact page.

This policy applies to people who earn through Waitline ("Users"), businesses that run ads ("Advertisers") and visitors to our website. It is published under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. What the browser extension does and does not access

• The extension only runs on chatgpt.com, claude.ai, gemini.google.com and our own website. It requests only the "storage" permission and access to those sites. It does not request access to your browsing history, other tabs, cookies, downloads, clipboard, location, camera or microphone.
• On the AI sites it only checks whether the AI is currently writing a reply, so it knows when to show a sponsored line. It never reads, copies, stores or transmits the text of your prompts, the AI's answers, your files or your conversation history.
• It stores a random device ID, a device token and your on/off setting in your browser.
• It sends us: the device ID; which ad was shown; on which of the three AI sites; when; how long it was visible; whether it was clicked or dismissed.

Our use of information received through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

3. Personal data we collect

We do not knowingly collect sensitive data such as health, biometric, religious, caste or sexual-orientation data. Bank account details and passwords are treated as sensitive personal data and protected accordingly.

4. Why we use it

• To provide the Service: create and secure your account, link your browsers, choose and show ads, and run Advertiser campaigns.
• To pay Users and bill Advertisers: calculate earnings, make payouts, take payments, issue receipts and process refunds.
• To prevent fraud and abuse: detect bots, scripted or fake views, duplicate accounts and payment fraud; enforce limits on views per hour and per day.
• To report to Advertisers: only aggregated numbers (views, clicks, click-through rate by day and AI site). Advertisers never receive your name, email, device ID or any information that identifies you.
• To communicate with you: account emails, password resets, payment and payout confirmations, campaign approvals, important changes to these terms. We do not send marketing email without your consent.
• To meet legal obligations: accounting, tax (including GST and TDS where applicable), KYC, responding to lawful requests from authorities.

We process your data on the basis of your consent, which you give when you create an account or install the extension, and for the legitimate uses permitted by section 7 of the DPDP Act, such as complying with law and preventing fraud.

5. Who we share it with

We share personal data only with service providers that help us run Waitline, under contracts or terms that require them to protect it, and only as much as they need:

• Razorpay Software Private Limited: Advertiser payments in India, and payouts to Users by UPI or bank transfer (RazorpayX).
• PayPal: international Advertiser payments and PayPal payouts to Users.
• Google: only if you choose "Sign in with Google".
• Our email provider: to deliver account and payment emails.
• Our hosting provider: stores the website, database and server logs.
• Government, regulators, courts and law enforcement: when required by Indian law or a valid legal order, or to protect the rights, property or safety of our Users, Advertisers or the public.
• A buyer or successor: if our business is merged, acquired or sold, subject to this policy.

We do not sell or rent personal data, and we do not share it with Advertisers.

6. Transfers outside India

Some providers, such as PayPal and our email provider, may process data outside India. We only transfer data to countries not restricted by the Government of India under section 16 of the DPDP Act, and only for the purposes above.

7. Cookies

We use only essential cookies: a session cookie that keeps you signed in. It expires when you sign out or after a period of inactivity. We do not use advertising or third-party analytics cookies. Razorpay, PayPal and Google may set their own cookies on their checkout and sign-in pages, under their own policies.

8. How long we keep data

• Account and payout details: while your account is open, and up to 3 years after closure to handle disputes, fraud investigations and chargebacks.
• Financial records (payments, payouts, invoices, ledger): 8 years, as required by the Companies Act, 2013 and GST law.
• Ad activity: as long as needed to pay Users, settle with Advertisers and handle disputes. After that it is deleted or kept only in aggregated form that does not identify you.
• Server logs: kept for a limited period for security purposes.

9. Your rights

Under the DPDP Act and Indian law you have the right to:

• Get a summary of the personal data we hold about you and how we use it.
• Correct, complete or update it. Most of it you can edit yourself in your dashboard.
• Have it erased, except data we must keep by law.
• Withdraw consent. You can uninstall the extension at any time, unlink a browser from your dashboard, or ask us to close your account. Withdrawing consent does not affect processing already done, and we may need to keep some records as described in section 8.
• Nominate a person to exercise your rights if you die or become incapacitated.
• Raise a grievance with our Grievance Officer (section 13). If you are not satisfied, you may complain to the Data Protection Board of India.

Email care@appsage.in from the address registered on your account. We may verify your identity before acting on the request.

10. Security

We protect data with reasonable security practices:

• HTTPS encryption everywhere.
• Passwords stored as salted one-way hashes.
• Payment-gateway keys encrypted at rest.
• Random session tokens in Secure, HttpOnly cookies.
• Rate limiting, and access restricted to authorised staff.

No system is perfectly secure. If a personal data breach occurs, we will notify affected people and the Data Protection Board as the law requires.

11. Children

Waitline is only for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

12. Changes to this policy

We may update this policy. If we make significant changes, we will notify you by email or on the website before they take effect. The effective date at the top always shows the current version.

13. Contact and Grievance Officer

We acknowledge grievances within 48 hours and aim to resolve them within 15 days.