Privacy Policy

Last updated July 2026

Template. Placeholder content to replace with your own policy, reviewed by legal counsel, before launch. This is not legal advice.

Overview

This policy describes how OrderVoice ("we") handles information when a restaurant uses our control panel and AI phone-ordering service. We aim to collect only what we need to run the service and to keep it secure.

Information we collect

Account data — your email, restaurant name, settings, and the emails of team members you invite. Operational data — call metadata (numbers, duration, language, status), transcripts and recordings, orders, and reservations captured by the agent. Order history is grouped by caller phone number so you can see repeat customers. Menu data you enter for the agent to reference. Audit data — an internal log of changes to prices, availability, order statuses and settings.

Call recordings & transcripts

Calls are handled by a managed voice platform and may be recorded and transcribed to capture the order. Transcripts — and, where the platform provides them, audio recordings — are stored against the corresponding call so you can review what was said. Tell your callers that calls may be recorded or transcribed where the law requires it.

How we use information

To operate the service: routing calls, parsing and validating orders against your menu, booking reservations, sending orders to your point of sale, showing your dashboard and analytics, sharing an order-status page with a customer when you choose to send them the link, and providing support.

Sharing & subprocessors

We share data with the vendors that power the service — the voice platform (Vapi or Retell), telephony (Twilio), speech/voice and language-model providers, and your chosen POS. We do not sell your data. Keys for these vendors are held server-side and never exposed in the browser.

Data retention

We retain operational data for as long as your account is active or as needed to provide the service, then delete or anonymize it on a reasonable schedule. You can request deletion of your restaurant's data.

Security

Every query is scoped to your restaurant by row-level security, third-party keys stay server-side, and inbound webhooks are signature-verified. No system is perfectly secure, but we take reasonable measures to protect your data.

Your rights

Depending on your region you may have rights to access, correct, export or delete your personal data. Contact us to exercise them.

Contact

Questions about privacy? Reach us at privacy@ordervoice.example.