How Restaurant Agent handles personal information

This Privacy Policy describes how Restaurant Agent ("we," "us," or "our") collects, uses, and shares information when you use our websites, dashboards, table QR experiences, voice features, and related services (collectively, the "Services").

Restaurants and other venues that use Restaurant Agent ("Restaurant Customers") may collect and process guest information through the Services. When a Restaurant Customer determines why and how guest data is processed, they may act as an independent controller of that data. This policy explains our practices as the provider of the platform; your Restaurant Customer may provide additional notices at the table, on their website, or in their ordering flow.

Information we collect

Depending on how you use the Services, we may collect:

• Account and profile data — such as name, email address, credentials, and role when you sign in to an owner or staff dashboard.
• Restaurant and operations data — such as menus, tables, QR codes or table identifiers, orders, carts, reservations, feedback, and settings you configure in the product.
• Guest session data — such as browser or device technical data, session identifiers, table or QR context, and interactions with the guest experience (for example, items viewed, cart contents, or messages sent through the interface).
• Voice and realtime media — when you use voice features, audio and related session metadata may be processed by us and our subprocessors to deliver transcription, language understanding, and realtime responses. We do not use this policy section to promise a specific retention period for audio; retention depends on product configuration, Restaurant Customer choices, and applicable law.
• Payment-related data — payment details are typically collected directly by payment processors; we may receive limited metadata (such as transaction status or identifiers) needed to operate the Services.
• Support and communications — information you send us when you request help or correspond with us.
• Diagnostics and security — logs, error reports, and usage information used to secure the Services, troubleshoot, and improve reliability.

How we use information

We use the information above to:

• Provide, operate, and maintain the Services;
• Authenticate users and enforce access controls;
• Process orders, reservations, and feedback in line with Restaurant Customer configuration;
• Operate voice and realtime features, including connection to conferencing and AI providers;
• Detect, prevent, and respond to fraud, abuse, and security incidents;
• Comply with legal obligations and respond to lawful requests;
• Improve the Services and develop new features.

How we share information

We may share information with:

• Restaurant Customers and their authorized staff — for example, order, table, and guest-session information visible in dashboards.
• Service providers and subprocessors — such as hosting, database, analytics, email, customer support tools, voice and video realtime infrastructure, and AI model providers, solely as needed to provide the Services.
• Professional advisors and authorities — when required by law or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.

We do not sell your personal information as that term is commonly defined in US state privacy laws.

Retention

We retain information for as long as necessary to provide the Services, comply with law, resolve disputes, and enforce agreements. Retention periods can vary by data type and by Restaurant Customer configuration.

Security

We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain processing of your personal information, and to object to or opt out of certain uses. You may also have the right to lodge a complaint with a supervisory authority.

To exercise rights, you can contact us using the details below. If your request relates to data collected by a Restaurant Customer through a table or guest flow, we may need to direct you to them, or work with them to fulfill your request where appropriate.

International transfers

We may process information in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

Children

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the effective date above. For material changes, we will provide additional notice as appropriate.

Contact

Questions about this Privacy Policy or our privacy practices can be sent to the contact address or email your organization uses for Restaurant Agent support, or to the administrator of your Restaurant Customer account.