Privacy Policy
Last updated: 30 October 2026
DRAFT — not yet reviewed by a lawyer. Every statement below describes what the product actually does today. Where something is not built yet it says so, rather than reserving a right we do not use.
Company details come from one shared source (
lib/legal/company.ts) — name, address, phone and email.
1. Who we are
iOrder is a service of iPOS Supply LLC, a Texas limited liability company. "iOrder" is a registered assumed name (dba) of iPOS Supply LLC.
- Address: 2611 Ludelle St, Fort Worth, TX 76105
- Phone: 800-767-3805
- Email: support@iorder.rest
2. The short version
- We never sell your data. We never share it for advertising. Not restaurant data, not diner data, not ever. That is not our business model — our business model is $14.99 a month.
- If you scan a menu, we do not know who you are. We do not set a cookie, read your IP address, or fingerprint your phone.
- We collect what a restaurant needs to use the service, and nothing we have no use for.
3. This policy covers three different people
Restaurant people — owners and staff who sign up and build menus. Diners — anyone who scans a code and reads a menu. People on the waiting list — anyone who left an email to be told when iOrder opens.
What we hold about these three groups is very different, so they are separated below.
4. If you are a diner
You can read a menu without telling us anything, and we have gone out of our way to keep it that way.
We do not collect: your name, your email, your phone number, your IP address, a cookie, a device fingerprint, a session identifier, your location, or your browsing history. Not stored, not hashed, not anywhere.
What we do count. We count how many times a menu was opened, and which table code was used. That counter holds no cookie, no IP address, no device identifier, no session, and no user agent — not even in hashed or scrambled form. It was deliberately built so that no scan can be traced back to a person or linked to any other scan. A restaurant sees "400 scans this month, table 6 has gone quiet". Nobody can see more than that, including us.
(Scan counting is not switched on yet. When it is, this is what it will and will not do.)
Your browser and our host. Like every website, our hosting provider processes the technical request needed to send you the page. We do not use that to build any profile of you.
No tracking pixels. No advertising networks. No analytics companies.
If you ask us about a menu by email, we will have your email and whatever you write to us.
4a. If you joined the waiting list
Before iOrder opens to new customers, our home page asks for one thing: an email address, so we can tell you the day it is ready.
That is all we store — the address you typed and the date you typed it. No name, no restaurant, no phone number, nothing bought from anyone, nothing bolted on later.
What we do with it:
- We send you one email when iOrder opens, with the launch price.
- We may send a short follow-up if the opening date moves.
- We do not sell it, rent it, trade it, or add it to any other list.
- We do not use it for advertising and we do not pass it to an advertising network.
Getting off the list. Every email has an unsubscribe link, and you can email support@iorder.rest at any time. Ask and we delete the address — we do not keep a record that you were ever on it.
How long we keep it. Until iOrder opens and the email is sent, and no more than twelve months after you joined. If we have not opened by then, we delete the list and start again rather than write to people who have forgotten us.
If you later sign up as a customer, your address moves to the restaurant account described below and the waiting-list entry goes.
5. If you are a restaurant
What we collect
| What | Why |
|---|---|
| Your email address | It is how you sign in and how we reach you |
| Your name, if you give it | So we know who we are talking to |
| Your restaurant's name, address, hours and web address | They are on your public menu |
| Your menu — dishes, prices, descriptions, allergen marks, pictures | It is the product |
| Who did what — who published, who changed a price, when | So you can see your own history, and so we can help when something goes wrong |
| Payment details | Handled by Stripe. We never see or store your card number. We hold a customer reference, what you are subscribed to, and your invoices |
| Support emails | So we can answer you |
| Error reports | When something breaks, so we can fix it |
What we do not collect
We do not ask for a government ID number, a date of birth, or anything about your customers beyond the counts described above.
Why we are allowed to hold it
Because you asked us to provide the service, because we must keep financial records by law, and because we have a legitimate interest in keeping the service working and secure.
Who can see your menu
Your published menu is public. That is the point of it — anyone with the link or the code can read it.
Your unpublished work is not. Draft changes are visible only to you, your staff, and our support staff where you have asked for help. Our support staff can edit a menu but can never publish it, and every publish is recorded with who pressed it.
6. The companies that help us run iOrder
These providers process data on our behalf. We have not added anyone for advertising, and we never will.
| Provider | What they do | Where |
|---|---|---|
| Supabase | The database, sign-in, and uploaded files | United States |
| Vercel | Hosting and delivery of the pages | United States |
| Stripe | Subscription payments. They handle card details; we do not | United States |
| Resend | Sending email, including your sign-in links | United States |
| Sentry | Error reports when something breaks | United States |
| Only if you choose "Sign in with Google" | United States |
A service that reads menu PDFs will be added when that feature is built. This page will name it before it processes a single menu, and it will never be used on anything but a menu you uploaded yourself.
We may also disclose information if the law requires it, or to protect our rights or someone's safety. If a court or authority demands your data we will tell you where we are legally permitted to.
7. Cookies
We use one kind of cookie: the one that keeps you signed in. Without it you would be signed out on every page. It is strictly necessary and there is nothing to opt out of.
Public menu pages set no cookies at all. There are no advertising cookies and no analytics cookies anywhere on iOrder.
8. How long we keep things
While you are a customer, we keep your menu and account for as long as you use the service.
If you leave, everything is kept for six months so you can come back and pick up where you left off. We email you at month five to tell you the deletion is coming, with a copy of your menu.
After six months we delete it — the menu, the pictures, the scan counts and the account. Three things remain:
- Financial records. Invoices and payments, kept for as long as US tax law requires. That is law, not preference.
- Your web address stays reserved for ever, if it was ever published or printed, so an old table tent lands on an honest "no longer available" page rather than a stranger's restaurant. The address is kept; the menu behind it is not.
- A record that the deletion happened — what was deleted, when, and for which restaurant.
9. Your choices and rights
You can:
- See what we hold — most of it is in your account already.
- Correct it — your menu and your details are yours to edit at any time.
- Get a copy — email us and we will send your menu in a file you can use elsewhere.
- Delete it — close your account and the six-month clock starts.
- Object or complain — email us first; we would rather fix it.
Depending on where you live you may have additional rights, including under the California Consumer Privacy Act. For the avoidance of doubt: we have never sold personal information and we do not share it for cross-context behavioural advertising.
Email support@iorder.rest for any of this. We will answer within 30 days.
10. Keeping it safe
Every restaurant's data is separated in the database by rules the database itself enforces, not just by the application — a query that forgot which restaurant it was asking about would be refused rather than return the wrong menu. That separation is tested before each feature that relies on it is built.
Connections are encrypted. Sign-in is by emailed link, so there are no passwords for anyone to steal. We take backups and we have restored one to prove it works.
No system is perfectly secure. If a breach affects you, we will tell you.
11. Children
iOrder is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe we have, email us and we will delete it.
12. Outside the United States
iOrder is operated from the United States and the providers above store data in the United States. If you use iOrder from elsewhere, your information is processed in the United States.
13. Changes
We may update this page. If a change materially affects you we will tell you by email before it takes effect. The date at the top always shows the current version.
14. Contact
support@iorder.rest · 800-767-3805 iPOS Supply LLC, 2611 Ludelle St, Fort Worth, TX 76105