Privacy Policy
Last updated · [draft — pending legal review]
This Privacy Policy explains what personal data Voodi collects, how we use it, who we share it with, and the choices you have when you use our website, dashboard, storefronts, mobile app, and related services.
1. Who is responsible
Voodi is the controller for data about merchants and their team members (account, billing, and usage data). When you order from or leave feedback on a restaurant's storefront, that restaurant is the controller of your data and Voodi processes it on the restaurant's behalf under our Data Processing Agreement. Diners should contact the restaurant first about their data; we'll help the restaurant respond.
2. Information we collect
Merchants: name, email, phone number (if provided), login and security data, team roles, store and menu content, and billing records — payment card details are handled by our payment providers and never stored by us. Diners: order details you enter (such as name, phone number, delivery address, table number, and notes) and feedback ratings, comments, and any contact details you choose to share. Everyone: technical data such as IP address, device, and browser type, security logs, and aggregate usage statistics.
3. How we use it and why
To provide the Service and process orders and payments (performance of a contract); to keep the Service secure, prevent fraud and abuse, and improve the product using aggregate statistics (our legitimate interests); to measure usage with analytics cookies, only if you consent; and to meet tax, accounting, and other legal obligations. We don't sell personal data.
4. AI features
When a merchant uses AI features, the menu text, images, and files they submit are sent to Google's Gemini models to generate suggestions, translations, and menu structures. Diner feedback may be analyzed by Anthropic's Claude models to produce summaries for the restaurant. We don't send passwords or payment card details to AI providers.
5. Service providers
We use these providers to run the Service: Supabase (database and authentication), Cloudflare (hosting, content delivery, file storage, email delivery, and bot protection), Stripe and Paymob (payments), Google (Analytics, with your consent, and Gemini AI), Anthropic (AI feedback analysis), and Sentry (error monitoring). They process data on our behalf and only as needed to provide their part of the Service. Restaurants can also add their own analytics or advertising tags to their storefronts (for example Meta, TikTok, or Google); these load only after you accept cookies on that storefront and are governed by the restaurant's and provider's policies.
6. International transfers
Our providers may process data outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Data retention
We keep account and store data while the account is active and delete it within a reasonable period after closure, except where we must keep records longer for legal, tax, security, or accounting reasons. Restaurants control how long their order and feedback data is kept while their account is active.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to receive a copy of it, and to withdraw consent at any time — for cookies, use the "Cookie settings" link. You can also lodge a complaint with your local data protection authority. Merchants can manage most data directly in the dashboard.
9. Security
We use encryption in transit, access controls, tenant isolation, and monitoring to protect personal data. No system is perfectly secure, and we'll notify affected parties of a personal data breach where the law requires it.
10. Children
The Service is not directed to children under 16, and we don't knowingly collect their personal data.
11. Changes
We may update this policy from time to time. We'll post the new version here with an updated date and notify merchants of material changes.
12. Contact
Questions about this policy or your data? Reach us at sales@voodi.ai.