Privacy Policy

1. Who we are

OrderVox is a product of VoxNova AI LLC ("OrderVox", "we", "us"), the entity responsible for the data practices described here. OrderVox provides an AI phone answering and ordering platform for restaurants. This policy covers data we process for restaurant customers ("you") and, on your behalf, for the people who call your restaurant ("callers").

2. Data we collect

Account data: your name, email, restaurant details, and authentication information (passwords are stored only as salted scrypt hashes; OAuth sign-in stores only provider identifiers).

Billing data: subscription plan, invoices, and payment status. Card details are collected and stored by Stripe — they never touch our servers.

Call data (processed on your behalf): audio during calls, transcripts, caller names and phone numbers, order contents, and optional recordings. Caller names and phone numbers are encrypted at the application layer before storage.

Usage data: dashboard activity, feature usage, and standard server logs (IP address, user agent) for security and reliability.

3. How we use data

To operate the service: answering calls, taking orders, sending SMS confirmations, and showing you your own call history and analytics.

To improve reliability and safety — for example diagnosing failed calls. We do not sell personal data, and we do not use your callers' data to market to them.

Transcripts and recordings are used to provide the service to you and are retained according to your plan's retention settings; you can disable recordings entirely.

4. Sub-processors

We rely on a small set of infrastructure providers to run the service: telephony and SMS (Twilio), speech-to-text (Deepgram), language model processing (OpenAI), text-to-speech (ElevenLabs), payments (Stripe), email (Resend), and cloud hosting. Each processes only the data needed for its function under its own data-protection commitments.

5. Caller consent & recordings

Call recording laws vary by state and country. When recordings are enabled, OrderVox can play a configurable disclosure at the start of each call. You are responsible for enabling the disclosures your jurisdiction requires.

6. Text messaging (SMS)

If you provide a phone number while placing an order through OrderVox's AI phone agent on behalf of a restaurant, you may receive a one-time SMS order confirmation and, if applicable, a follow-up "your order is ready" text for that specific order. Consent is collected verbally during the call, when the AI agent asks whether you would like a text confirmation of your order. Message frequency depends on how many orders you place — typically one to two messages per order.

Mobile phone numbers collected for order-confirmation texts are not shared with or sold to third parties or affiliates for marketing purposes.

Message and data rates may apply. Reply STOP at any time to opt out of text messages, or HELP for assistance.

7. Security

Sensitive caller fields are encrypted at the application layer; dashboard access is role-based and audit-logged; sessions are revocable server-side; webhooks are signature-verified; secrets live in environment configuration, never code. No system is perfectly secure — report suspected issues to support@ordervox.net.

8. Retention & deletion

Account data is retained while your subscription is active and for 90 days after cancellation, then deleted. You can request earlier deletion of your account or of specific caller data at any time from your dashboard or by contacting support.

9. Your rights

Depending on your location you may have rights to access, correct, export, or delete personal data. Contact support@ordervox.net and we will respond within 30 days.

10. Changes

We'll notify account owners by email of material changes to this policy at least 14 days before they take effect.