Privacy Policy

This Privacy Policy applies to RestoStack AI, operated by RestoStackAI ("RestoStack AI," "we," "us," or "our"), and to our website at restostack.ai and related services.

RestoStack AI provides end-to-end restaurant technology solutions, including point-of-sale workflow tools, delivery channel aggregation, menu and order management, social media management, customer engagement tools, analytics, and AI voice agents that help restaurants capture missed calls and respond to customer inquiries.

We process different types of information in different roles:

• Information about restaurant customers. When a restaurant uses RestoStack AI to process orders, calls, messages, delivery channel data, or customer engagement information, we generally process that information on behalf of the restaurant. In that situation, the restaurant is responsible for its own privacy notices and customer permissions, and RestoStack AI acts as a service provider or processor as described in our customer agreement or data processing agreement.
• Information about website visitors, prospects, account users, and restaurant administrators. When you visit our website, request a demo, create an account, contact sales, or use RestoStack AI as an authorized user, we process your information for our own business purposes as described in this Privacy Policy.

Information you provide to us

• Contact and business information: name, email address, phone number, restaurant name, role, website, business address, and restaurant details.
• Account information: login credentials, user permissions, workspace settings, team members, preferences, and support requests.
• Billing information: subscription details, invoices, tax information, and payment status. We may use payment processors to handle card or bank payment information.
• Communications: messages you send to us, demo requests, support tickets, call recordings or transcripts from support interactions, survey responses, and feedback.
• Mobile telephone number and messaging preferences: when you enable SMS alerts, we collect the mobile number you provide, the date and time of your consent, the method by which consent was given, and your per-alert notification preferences. We also retain records of messages sent to you, their delivery status, and any opt-out request you make.

Information processed through the RestoStack AI platform

Depending on the products enabled by a restaurant, RestoStack AI may process information such as:

• Customer names, phone numbers, email addresses, delivery addresses, order details, preferences, loyalty information, notes, and transaction history.
• POS, menu, inventory, pricing, location, and employee or staff account data provided by a restaurant or connected system.
• Delivery marketplace and channel information, including order status, customer instructions, delivery provider metadata, refunds, cancellations, and performance metrics.
• Social media content, post drafts, comments, messages, campaign information, analytics, and connected account identifiers.
• AI voice agent data, such as caller ID, call audio, transcripts, call summaries, customer intent, reservation or order requests, missed-call records, and follow-up status.
• Integration credentials, tokens, API keys, webhooks, and configuration information needed to connect restaurant systems and third-party platforms.

Information collected automatically

• Device and usage data: IP address, browser type, operating system, device identifiers, pages viewed, referring URLs, log data, and feature usage.
• Cookies and similar technologies: cookies, pixels, local storage, and analytics technologies that help us operate, secure, personalize, and measure our website and services.
• Security data: authentication logs, access logs, error logs, suspicious activity indicators, and related diagnostic information.

Information from third parties

We may receive information from restaurants, POS providers, delivery marketplaces, social media platforms, telephony providers, payment processors, analytics providers, marketing vendors, and other integrations selected or authorized by our customers.

We use information for the following purposes:

• Provide, operate, maintain, and improve RestoStack AI products and services.
• Connect and synchronize POS systems, delivery channels, menus, orders, social media accounts, customer communications, and AI voice agent workflows.
• Route, process, summarize, and analyze calls, orders, messages, missed-call records, support interactions, and restaurant workflows.
• Create and manage accounts, authenticate users, set permissions, and provide customer support.
• Send administrative messages, product updates, security alerts, invoices, and service notices.
• Personalize product experiences, measure performance, troubleshoot issues, and develop new features.
• Market our services to businesses, including sending newsletters, demo follow-ups, and promotional communications where permitted.
• Protect the security, availability, and integrity of our website, platform, users, customers, and integrations.
• Comply with legal obligations, enforce agreements, resolve disputes, and prevent fraud, misuse, or unauthorized access.

AI and model improvement. We may use operational data to improve service quality, reliability, classification, routing, and product performance. We do not use restaurant customer data to train publicly available AI models unless permitted by the applicable customer agreement or with appropriate authorization.

We may share information with the following categories of recipients:

• Restaurant customers and account administrators: information available within their own RestoStack AI workspace, reports, integrations, and workflows.
• Service providers and subprocessors: hosting, infrastructure, database, analytics, payment, email, customer support, telephony, transcription, AI, security, and monitoring vendors that help us provide the services.
• Connected integrations: POS providers, delivery marketplaces, social media platforms, messaging providers, and other third-party services selected or authorized by a restaurant.
• Professional advisors: attorneys, accountants, auditors, insurers, and other advisors.
• Legal and safety recipients: government authorities, law enforcement, courts, or other parties when we believe disclosure is required or appropriate to comply with law, protect rights, prevent fraud, or address security issues.
• Business transaction parties: parties involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction involving RestoStack AI.

We do not sell restaurant customer personal information as the term "sell" is commonly understood. We also do not knowingly share restaurant customer personal information for cross-context behavioral advertising unless expressly configured, authorized, and legally permitted.

Exclusion for mobile and SMS data. Notwithstanding anything else in this section, mobile phone numbers and SMS opt-in consent are excluded from all sharing, sale, disclosure, and transfer described above. We share this information only with messaging service providers strictly as necessary to deliver alerts you have requested, and never for those providers' own marketing purposes.

RestoStack AI voice agents may answer calls, capture missed calls, collect order or reservation details, summarize conversations, transcribe audio, trigger follow-up workflows, or route calls and messages to restaurant staff.

Depending on the restaurant's configuration and applicable law, callers may be notified that they are interacting with an AI-enabled system or that calls may be recorded, transcribed, or monitored. Restaurants are responsible for providing legally required notices and obtaining legally required consents for their own customers, callers, employees, and other end users.

AI-generated outputs may be incomplete or inaccurate. Restaurants should review AI-generated call summaries, suggested responses, order details, and customer instructions before relying on them for sensitive or high-impact decisions.

We do not sell, rent, or trade your mobile phone number or your SMS consent to anyone. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile information may be shared only with service providers acting on our behalf and solely to deliver the messages you have requested — for example, our telecommunications and messaging infrastructure providers. These providers are contractually prohibited from using your information for any other purpose.

Text messaging originator opt-in data and consent are excluded from all other sharing described in this Privacy Policy. This information will not be shared with any third parties for their own purposes.

What we send

If you opt in, RestoStack AI sends operational SMS alerts about your own account: catering orders awaiting your acceptance, payment and deposit notifications, service status alerts, and periodic activity summaries. We do not send marketing or promotional text messages under this consent.

How you opt in

SMS alerts are optional. You opt in by checking the SMS alerts box during account onboarding, or by enabling SMS alerts later in your RestoStack AI dashboard notification settings. Consent to receive SMS messages is not a condition of purchasing any product or service.

Message frequency and costs

Message frequency varies based on your account activity and the alert types you enable. You can change which alerts you receive at any time in your dashboard. Message and data rates may apply — RestoStack AI does not charge for SMS alerts, but your mobile carrier may.

How to opt out

Reply STOP to any message to stop receiving SMS alerts from RestoStack AI. You will receive a single confirmation message, after which no further messages will be sent. You may also disable SMS alerts in your dashboard or email [email protected]. Opting out of SMS does not affect your account, and you will continue to receive the same alerts by email and in-app notification.

Help and carrier limitations

Reply HELP to any message for assistance, or contact us at [email protected]. Mobile carriers are not liable for delayed or undelivered messages.

We may use cookies and similar technologies to operate the website, remember preferences, understand traffic, improve performance, prevent fraud, and support marketing. You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.

Where legally required, we will provide additional cookie notices, consent tools, or opt-out mechanisms.

We retain information for as long as needed to provide the services, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, and protect our rights. Retention periods may vary based on the type of information, customer configuration, contract requirements, legal requirements, backup cycles, and operational needs.

We retain your mobile number and SMS consent records for as long as your account is active and for 24 months after you opt out or close your account, in order to honor opt-out requests and to demonstrate compliance with messaging regulations. Opt-out records are retained indefinitely so that we do not message a number that has withdrawn consent.

Restaurant customer data processed on behalf of a restaurant is retained according to the applicable customer agreement, account settings, deletion requests, and legal requirements.

Depending on your location and relationship with RestoStack AI, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent for certain personal information. You may also have the right to opt out of certain marketing communications or certain types of data sharing.

To make a request, contact us using the details below. We may need to verify your identity and your authority to act on behalf of a business or another person before fulfilling a request.

If your request relates to information controlled by a restaurant, we may direct you to that restaurant or support the restaurant in responding to your request.

Marketing choices

You may unsubscribe from marketing emails by using the unsubscribe link in the email or contacting us. We may still send non-marketing messages such as security alerts, invoices, and service notices.

RestoStack AI may process and store information in the United States and other countries where we, our affiliates, service providers, or subprocessors operate. Where required, we use appropriate safeguards for international transfers of personal information.

We use administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction. These measures may include encryption, access controls, logging, monitoring, secure development practices, vendor review, and incident response procedures.

No method of transmission or storage is completely secure. Restaurants and account users are responsible for maintaining strong passwords, protecting credentials, managing user access, and securely configuring third-party integrations.

RestoStack AI is designed for businesses and is not directed to children. We do not knowingly collect personal information directly from children through our website or business services. Restaurants should not use RestoStack AI to knowingly collect information from children unless they have the authority and notices required by applicable law.

Our website and services may link to or integrate with third-party websites, platforms, marketplaces, social networks, payment processors, and other services. Their privacy practices are governed by their own policies, not this Privacy Policy.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and provide additional notice where required. Your continued use of our website or services after an update means the updated policy applies to your use going forward.

For privacy questions or requests, contact us at:

RestoStack AI
RestoStackAI
Email: [email protected]