Legal & Privacy

Privacy Policy

Last updated: April 1, 2026

At RestroAgent, your privacy matters. This policy explains how we collect, use, and protect your information when you use our platform.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account (name, email, password), set up your restaurant profile (restaurant name, address, cuisine type, phone number), upload menus and knowledge base documents, and contact our support team. Payment information is processed securely by our third-party payment processor and we do not store full card details.

2. Customer Data (Your Restaurant's Data)

When your AI agent interacts with your customers, we process that conversation data on your behalf. This "Customer Data" — including customer names, phone numbers, order details, and conversation transcripts — belongs 100% to you. We act as a data processor, not a data controller, and never use your data to train public models.

3. How We Use Your Information

We use the information we collect to: provide, maintain, and improve the Service; process transactions and send related information; send technical notices, updates, security alerts, and support messages; and comply with legal obligations.

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties for marketing purposes. We only share information with critical service providers (hosting, payment processing) under strict confidentiality agreements.

5. Data Retention & Deletion

We retain your account data for as long as your account is active. Conversation transcripts and call recordings are retained for configured retention periods (default 90 days). You can request permanent data deletion at any time.

6. Security & Encryption

We implement industry-standard security measures including TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, regular security audits, and role-based access controls. We are SOC 2 Type II certified.

Questions about your privacy or data?