Privacy Policy
Last updated July 2026
Overview
This policy describes how OrderVoice ("we") handles information when a restaurant uses our control panel and AI phone-ordering service. We aim to collect only what we need to run the service and to keep it secure.
Information we collect
Account data — your email, restaurant name, settings, and the emails of team members you invite. Operational data — call metadata (numbers, duration, language, status), transcripts and recordings, orders, and reservations captured by the agent. Order history is grouped by caller phone number so you can see repeat customers. Menu data you enter for the agent to reference. Audit data — an internal log of changes to prices, availability, order statuses and settings.
Call recordings & transcripts
Calls are handled by a managed voice platform and may be recorded and transcribed to capture the order. Transcripts — and, where the platform provides them, audio recordings — are stored against the corresponding call so you can review what was said. Tell your callers that calls may be recorded or transcribed where the law requires it.
How we use information
To operate the service: routing calls, parsing and validating orders against your menu, booking reservations, sending orders to your point of sale, showing your dashboard and analytics, sharing an order-status page with a customer when you choose to send them the link, and providing support.
Sharing & subprocessors
We share data with the vendors that power the service — the voice platform (Vapi or Retell), telephony (Twilio), speech/voice and language-model providers, and your chosen POS. We do not sell your data. Keys for these vendors are held server-side and never exposed in the browser.
Data retention
We retain operational data for as long as your account is active or as needed to provide the service, then delete or anonymize it on a reasonable schedule. You can request deletion of your restaurant's data.
Security
Every query is scoped to your restaurant by row-level security, third-party keys stay server-side, and inbound webhooks are signature-verified. No system is perfectly secure, but we take reasonable measures to protect your data.
Your rights
Depending on your region you may have rights to access, correct, export or delete your personal data. Contact us to exercise them.
Contact
Questions about privacy? Reach us at privacy@ordervoice.example.