Privacy Policy
Voresto — AI assistant for restaurants. Last updated 14 October 2026.
Voresto answers a restaurant's customers by phone and in messaging apps
(WhatsApp, Instagram, Messenger, Telegram) on that restaurant's behalf. This
policy describes what the service does with the information in those
conversations. Each restaurant is the controller of its own customers' data;
Voresto processes it for them.
What is collected
- The content of the conversation — what a customer writes or says, and what the assistant replies.
- An identifier for the conversation: a chat id, or the phone number a call arrived on. This addresses the conversation; it is not linked to a profile.
- Order and booking details a customer provides: name, pickup or booking time, the items ordered, and any note they add.
What is not collected
- Profile names, usernames and locale sent by the messaging platforms are not stored.
- No payment details are taken, stored or processed.
- No advertising or tracking identifiers, and no cookies — the service has no website that customers browse.
Why
To answer the question that was asked, to place an order or booking with the
restaurant, and to keep the record a restaurant needs to fulfil it. Nothing is
used for advertising, and nothing is sold or shared for anybody else's
marketing.
Who it reaches
- The restaurant the customer contacted, which receives the order or booking.
- The messaging or telephony provider carrying the conversation (Meta for WhatsApp, Instagram and Messenger; Telegram; Twilio for calls).
- The language-model provider that generates the reply (OpenAI), which processes the text of the conversation and does not use it to train models.
- The language-model provider that reads the documents, photos and web pages a restaurant imports into its FAQ, and rewords answers on request (Anthropic), which processes that content and does not use it to train models.
How long it is kept
Conversation transcripts are deleted after each restaurant's retention
window. The order or booking record is kept for as long as the restaurant needs
it for its own accounts. Deleting a transcript does not delete the order it
produced.
Your rights
Under the GDPR you may ask for a copy of your data, ask for it to be
corrected, or ask for it to be deleted. Requests are answered within one month.
Contact the restaurant you spoke to, or the address below and we will pass it on.
Contact
info@voresto.com