Privacy

Redial answers a restaurant’s phone and takes orders. This page describes what information passes through it, why, and how long it is kept.

Two different kinds of people

Restaurant staff have accounts here. Diners do not — they call a restaurant or scan a code, and no account is ever created for them.

When a diner orders, the restaurant decides what happens to that information; Redial handles it on the restaurant’s instructions. In data-protection terms the restaurant is the controller and we are the processor.

What we hold about staff

• Name and email address, to sign in and to show colleagues who did what.
• Which restaurant the account belongs to, and what it is allowed to do.
• Authentication is handled by Supabase; passwords are never visible to us.

What we hold about diners

• The name and phone number given when ordering, so the restaurant can reach them.
• The order itself — items, options, prices and any notes.
• For phone orders: the caller’s number, how long the call lasted, and a transcript of what was said.

Phone calls are transcribed

When the AI answers, the conversation is turned into text and stored with the order. It is used to settle disputes about what was ordered and to improve how the AI answers. The restaurant can read it; we can read it to support the restaurant.

Recording and transcribing calls is regulated, and the rules differ by state — some require every party to consent, not just one. A restaurant using Redial is responsible for meeting the rules that apply where it operates, and should take its own advice on whether an announcement at the start of the call is required.

Payments

Card details are never entered into or stored by Redial. Subscription payments are handled by Stripe, which holds the card and shares only the status of the subscription with us.

Who else sees it

• Supabase — the database and sign-in.
• Twilio — the phone number and call routing.
• ElevenLabs — the voice agent that answers and transcribes.
• Stripe — subscription billing.
• Vercel — hosting.

Nothing is sold, and nothing is shared for advertising.

How long it is kept

• Orders and their transcripts: kept while the restaurant’s account is open, because they are its own business records.
• Staff accounts: removed when the person is removed from the team.
• A restaurant that closes its account can ask for its data to be deleted.

Asking about your data

If you ordered from a restaurant and want to know what it holds about you, contact the restaurant — it decides. If you are a restaurant and need something exported or deleted, contact us and we will act on it.