Privacy Policy

Last updated: 3 July 2026. This policy explains what data Voitly collects, why we collect it, and the choices you have. We have written it in plain English because you should not need a law degree to understand what happens to your data.

1. Who we are

Voitly ("we", "us") provides an AI ordering service for restaurants: an AI agent that answers the restaurant's phone and takes orders by voice, an optional QR table ordering add-on, a kitchen display, and menu management tools. Our website is voitly.ai.

Two different relationships matter in this policy:

Restaurants that create a Voitly account. For your account data, we decide how and why it is processed, so we act as the data controller.
Guests who order from a restaurant by phone or QR code. Your order data belongs to the restaurant you ordered from. The restaurant is the data controller and we process that data on the restaurant's behalf, as a data processor.

2. Data we collect

Restaurant account data

Name, email address, and password (stored as a secure hash) when you register.
Restaurant details you add: restaurant name, menu items, prices, modifiers, allergen information, opening hours, and settings.
Billing records for your subscription. Card payments are handled by Stripe, our payment processor. We never see or store your full card number.

Guest order data (processed for the restaurant)

Phone orders: the caller's phone number, the audio of the call, and a transcript. The call is processed by our AI so it can take the order. Where call recording applies, callers must be informed in line with the laws of the restaurant's location, and the restaurant is responsible for any notice wording local law requires.
QR orders: the items ordered, table number, any notes the guest types (for example allergies), and the language used. QR ordering needs no app, no account, and no password, so we do not ask guests to identify themselves.
Order records: what was ordered, when, and its status, so the kitchen display and order history work.

Website and product usage data

Standard technical logs: IP address, browser type, pages visited, and timestamps, used for security and to keep the service running.
This marketing website does not run third-party advertising or analytics cookies. The signed-in dashboard uses storage that is strictly necessary to keep you logged in and remember your settings.

3. How we use data

To provide the service: answer calls, take orders, deliver tickets to the kitchen display, and keep menus in sync.
To run your account: authentication, billing, support, and service messages.
To keep the service safe: fraud prevention, abuse detection, debugging, and security monitoring.
To meet legal obligations, such as tax and accounting rules.

What we do not do. We do not sell personal data. We do not use guest order data to train foundation AI models. Guest data belongs to the restaurant it came from, not to us.

4. When we share data

With the restaurant you order from. If you place an order as a guest, the restaurant receives your order details, and for phone orders your phone number, so it can prepare and fulfil your order.
With service providers that help us run Voitly: cloud hosting and infrastructure, telephony carriers that connect phone calls, speech and AI processing providers that power the ordering conversation, Stripe for payments, and web hosting. Each provider is bound by contract to process data only on our instructions.
When the law requires it, for example a valid court order, or to protect the rights and safety of Voitly, our customers, or others.
In a business transfer, such as a merger or acquisition, in which case this policy continues to apply to the transferred data.

5. How long we keep data

Restaurant account data is kept while your account is active and deleted or anonymised after the account closes, except records we must keep for legal reasons.
Guest order data, including call recordings and transcripts, is kept according to the controlling restaurant's settings and instructions. Restaurants can request deletion of any record, and we honour those requests without a support ticket marathon.
Security logs are kept for a limited period and then deleted.

6. Your rights

Depending on where you live, including under the UK and EU GDPR and comparable laws such as the California Consumer Privacy Act, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.

Guests: the restaurant you ordered from controls your order data, so the fastest route is to contact the restaurant directly. If you contact us instead, we will assist and forward your request to the restaurant.
Restaurants: email us at [email protected] and we will handle your request.

You also have the right to complain to your local data protection authority.

7. Security

Data is encrypted in transit. Access to production systems is restricted to the people who need it to run the service, and passwords are stored only as secure hashes. No system is perfectly secure, but if we ever discover a breach that affects your data we will notify you and the relevant authorities as the law requires.

8. International transfers

Voitly serves restaurants in more than one country, so data may be processed on servers outside the country where it was collected. Where data protection law requires it, we rely on recognised safeguards such as standard contractual clauses for those transfers.

9. Children

Voitly accounts are for restaurant businesses and may only be created by adults. Our service is not directed at children and we do not knowingly collect personal data from children. A guest placing an order does not create an account and provides no more data than the order itself needs.

10. Changes to this policy

If we change this policy, we will update this page and the date at the top. For significant changes we will notify restaurant account holders by email before the change takes effect.

11. Contact us

Questions about privacy or this policy: [email protected]. You can also reach support at [email protected] or use our contact page.