Privacy Policy

System Reset Technologies Inc., operating as FoodOrders.ai (“FoodOrders”), handles personal information through its websites, restaurant storefronts, ordering, voice/chat, support, accounts, billing, security, devices, and partner services. A Restaurant may independently control customer information; consult its notice as well.

Information we handle

We may handle identifiers and contact information; account and business details; menu and order contents; fulfillment and delivery information; transaction references and billing records; support communications; conversation transcripts and structured AI events; device, printer, station, log, security, and approximate network information; preference and consent records; and information supplied by integrated services. Payment processors receive card credentials directly; FoodOrders must not receive raw card numbers or security codes.

Purposes and legal bases

We use information to provide and secure ordering and restaurant services; authenticate users; construct, validate, route, fulfill, support, and reconcile orders; process billing; communicate operational status; detect fraud and abuse; diagnose reliability; comply with law; and establish or defend claims. Where required, processing relies on consent, contract, legal obligation, legitimate interests, or another lawful basis.

Marketing is separate from transaction messages and offers opt-out. Operational transcripts are not permission to train models. Optional research or model-improvement use requires a distinct, recorded choice and appropriate de-identification and governance.

Sharing and service providers

Information may be disclosed to the applicable Restaurant; infrastructure/database, payment, telephony/messaging, voice/AI, email, domain/security, mapping, printing, POS, aggregator, delivery, and support providers needed for selected features; professional advisers; a transaction successor; and authorities where lawfully required.

Current principal provider categories include Supabase (database, authentication, storage, and server functions), Stripe (payments), Twilio (telephony and messaging), ElevenLabs (voice processing), Lovable platform services (application infrastructure used by the project), configured email providers, and Cloudflare (security and domain services). A provider receives only the information needed for the enabled function. Providers and processing locations can change; current details are available from privacy@foodorders.ai.

We do not sell personal information for money. If a future practice is legally defined as sale, sharing, or targeted advertising, it will be identified and controlled as required before use.

Audio, AI, and automated actions

The live audio stream may be transmitted to contracted voice providers for transcription and response. FoodOrders does not retain raw call or microphone audio by default. Providers may transiently process technical buffers under configured service terms. FoodOrders may retain transcripts, structured order events, notice/consent evidence, and support records for operational purposes.

AI helps interpret ordering language and proposes cart actions. Server-side systems validate menu, price, and permitted order actions. The customer reviews the final structured summary. AI does not make a solely automated decision with legal or similarly significant effect about a person; a Restaurant or FoodOrders operator handles safety questions, disputes, account decisions, and exceptions.

Retention

We retain data only as reasonably necessary for service, security, disputes, accounting, and law. Active account and configuration data is retained while the account operates. Order, payment-reference, agreement, tax, and accounting evidence may be retained for the applicable statutory period. Support and security records are retained for operational need and then deleted or de-identified. Raw audio is off by default. Optional research data follows its separately stated period. Legal holds pause eligible deletion, and backups expire by controlled rotation.

Because exact periods depend on record type, jurisdiction, tenant configuration, and legal holds, a person may request the applicable schedule for their record from the Privacy Officer.

Security and international processing

We use proportionate safeguards including tenant scoping, least privilege, access controls, encrypted transport, logging, secret separation, incident response, and vendor controls. No system is perfectly secure. Providers may process information in Canada, the United States, or other configured service regions, where local authorities may lawfully access it. We use contractual and provider safeguards appropriate to the service and jurisdiction.

Your choices and rights

Depending on location, a person may request access, correction, deletion, portability, information about disclosure, restriction or objection, consent withdrawal, or appeal; opt out of marketing and any covered sale/sharing or targeted advertising; and complain to a regulator. Rights have legal exceptions and identity must be proportionately verified. Withdrawing optional consent does not prevent core ordering where the information is unnecessary to that order.

Submit a request to privacy@foodorders.ai. We may route a request to the Restaurant when it is the responsible controller. We do not unlawfully discriminate for exercising privacy rights. The services are not directed to children under 13, and a guardian should contact us about suspected collection.

Contact and changes

Privacy Officer, System Reset Technologies Inc. operating as FoodOrders.ai, 2 John St, Burford, Ontario N0E 1A0, Canada; privacy@foodorders.ai; business line +1 289-204-3399.

A new version and effective date will be posted for changes. Material new uses receive additional notice or consent where required. Canadian users may contact the Office of the Privacy Commissioner of Canada or an applicable provincial authority; U.S. users may contact their state authority.