Privacy Policy

Who we are and what this policy covers

Enkira, Inc. (“Enkira,” “we,” “us”) builds and operates PanBot, an AI phone receptionist for independent restaurants. When you call a restaurant that uses PanBot, PanBot answers the phone, takes your order by voice, and enters it into the restaurant's point-of-sale system.

This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and the choices you have. It covers the enkira.ai website, the PanBot voice service, and the order-confirmation text messages described in our SMS Terms.

The restaurant you called also handles your information for its own purposes. This policy describes what Enkira does. It does not cover what a restaurant does with an order once the order reaches them, and it does not cover other companies' websites or services.

Information we collect

If you call a restaurant that uses PanBot, we collect:

• your telephone number — from caller ID, and from what you say on the call if you give a different number for the restaurant to reach you on;
• your name — as your phone carrier presents it with the call, or as you say it on the call;
• your order — the items, quantities, modifications, and special instructions you ask for;
• pickup or delivery details you give, such as a delivery address or a pickup time;
• audio recordings of the call and written transcripts of it (see Call recording and transcripts below);
• ordinary call records, such as the number you called, when the call happened, and how long it lasted.

PanBot does not collect or store payment card details. We do not take card numbers on the call. Where a restaurant offers online payment, the order-confirmation text links you to a payment page run by a third-party payment processor, and you enter your card details there, under that processor's own terms. We receive confirmation that an order was paid — not your card information.

If you work at a restaurant that uses PanBot, we collect business contact details — name, role, business email address, and business telephone number — and a staff contact number that we use to send operational alerts about the phone line and about orders that need someone's attention.

If you visit our website, our hosting provider collects aggregate performance measurements about page loads, such as load times and general usage. We do not run advertising or cross-site tracking on this site. If you fill in the contact form, we collect the name, email address, company, inquiry type, and message you enter, so that we can reply to you.

How we use information

We use personal information to:

• answer the phone, take your order, read it back to you, and send it to the restaurant's point-of-sale system;
• send you the order-confirmation text message described in our SMS Terms, and give the restaurant a way to reach you about that order;
• operate, secure, and troubleshoot the service — for example, to work out why a call dropped or why an order did not reach the kitchen;
• measure and improve how well PanBot works — scoring calls against our own quality benchmarks, reviewing where it misunderstood an order, and testing changes before we release them;
• develop and improve our own models and systems, including training and evaluating them on recordings and transcripts;
• communicate with restaurants about their service, and reply to people who contact us;
• in future, send you promotions or special offers from a restaurant you have ordered from — we do not do this today, the order confirmation described in our SMS Terms is not a promotional message, and we would ask for your agreement separately before sending you one;
• meet our legal obligations, enforce our terms, and establish or defend legal claims.

Our services are offered in the United States. Where a law requires us to identify a basis for processing, we rely on performing the service you asked for, our legitimate interest in operating and securing that service, compliance with legal obligations, and your consent where consent is what the law requires.

Call recording and transcripts

PanBot records calls. Recordings are turned into written transcripts, and the recording and the transcript together are our record of what was said and what was ordered.

Recording law in the United States is not uniform. Some states require only one party to a call to consent to it being recorded; others require every party to consent. What is required can also depend on how notice is given and where each person on the call is.

Whether you hear a spoken notice depends on the restaurant. Where the law that applies to a restaurant requires everyone on a call to agree to being recorded, you hear a recorded notice at the start of the call and the conversation continues only once you agree. Where it does not, no separate notice plays, and recording rests on the consent of the restaurant, which is a party to the call.

Either way the call is recorded, so you should assume that a call answered by PanBot is being recorded. If you would rather not be recorded, end the call and contact the restaurant another way. Nothing in this policy states a legal conclusion about which rule applies to any particular call.

We use recordings and transcripts to take and complete the order, to resolve questions or disputes about it, to diagnose faults, and to measure how well PanBot performed — scoring calls against our quality benchmarks and finding where it misheard or mishandled something. We also use them to develop, train, and evaluate our own models and systems. They are handled by the service providers described below, including the AI providers whose models process the audio and the text in order to understand the order.

We do not permit those providers to use your call audio or transcripts to train their own models. Where a provider offers a choice about whether submitted content improves that provider's models, we take the option that excludes it, and we contract for the same thing where we can. That is a commitment about how we configure and contract for these services, not a guarantee of another company's conduct — if we find that a provider has not honored it, we will change how we use that provider or stop using it. Anything we do with recordings ourselves is described in this policy, and we do not sell them or share them for anyone else's marketing.

How we share information

We share personal information in the following ways:

• With the restaurant you ordered from. Your order, your name if you gave one, your telephone number, and your pickup or delivery details go to that restaurant and into its point-of-sale system, so the restaurant can prepare your order and reach you about it. The restaurant then handles that information under its own practices.
• With service providers who make the product work. These are companies we engage to run the service on our behalf, and they may use the information only to provide their service to us. They fall into these categories: telephony and messaging carriers that carry the call and deliver the text message; cloud hosting and infrastructure providers that run our systems; AI model providers that process call audio and transcripts; quality and monitoring tools that store calls, transcripts, and our reviewers' notes so we can measure and debug how PanBot performed; and ordinary business tools, such as the email service that delivers a message you send us through our contact form.
• For legal and safety reasons. Where the law, legal process, or a lawful request requires it, or where we reasonably believe it is necessary to protect the rights, property, or safety of Enkira, a restaurant, our users, or the public.
• In a business transfer. If Enkira is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction and remains subject to this policy.

We do not sell your personal information and we do not rent it. We do not share it with third parties for their own marketing or advertising.

Text messages and mobile information

This section covers mobile telephone numbers and the consent you give to receive PanBot text messages. It is set out separately because a stricter rule applies to it than to anything else in this policy.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are not shared with any third party.

We use your mobile number to send you the order-confirmation message described in our SMS Terms and to give the restaurant a way to reach you about that order. It goes to the restaurant you ordered from, to the messaging provider that delivers the message, and to the AI providers that process the call. Each may use it only to provide their service to us. The categories of sharing described above exclude text-messaging opt-in data and consent, which are never shared, sold, or rented.

You can stop these messages at any time by replying STOP to any PanBot message. Our SMS Terms explain how opt-in and opt-out work, what the messages contain, and how often they are sent.

How long we keep information

We keep personal information for as long as we need it for the purpose we collected it for, and then for as long as we are required to keep it in order to meet legal, tax, accounting, or dispute-resolution obligations. In practice, order information is kept while the order is live and afterwards as a business record; call recordings and transcripts are kept as the record of the call and for quality review and troubleshooting; and a record that you opted out of text messages is kept for as long as we need it to make sure we do not message you again.

A single retention period does not apply to everything we hold. When we no longer need personal information for these purposes, we delete it or remove what identifies you.

How we protect information

We use administrative and technical safeguards intended to protect personal information, and information sent over the internet travels over encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee the security of information you send us. If you believe your information has been put at risk, tell us through our contact page.

Children's privacy

Our services are not directed to children, and we do not knowingly collect personal information from children under 13. PanBot is a service for placing restaurant orders and is intended for adults. If you believe a child under 13 has given us personal information, contact us and we will delete it.

Your privacy rights

A number of U.S. states — including California under the CCPA as amended by the CPRA, and states with comparable laws such as Colorado, Connecticut, Texas, and Virginia — give residents rights over their personal information. Depending on where you live, those rights may include the right to:

• know what personal information we have collected about you, and the sources, purposes, and categories of recipients;
• receive a copy of that information;
• correct information that is inaccurate;
• delete information we hold about you;
• opt out of the sale of personal information, of sharing it for targeted advertising, and of certain profiling, and to limit the use of sensitive personal information;
• not be treated differently because you exercised a privacy right;
• appeal, where your state's law provides for an appeal, if we decline your request.

Enkira does not sell personal information and does not share it for cross-context behavioral advertising, so there is no such activity to opt out of. We will still record and honor an opt-out request you send us.

Some information cannot be deleted on request — for example, where we are required to keep it, or where it forms part of the restaurant's own record of a transaction you made with that restaurant. A request about a restaurant's own records has to be made to the restaurant.

How to exercise your rights

Send your request through our contact page. Tell us what you are asking for and give us enough detail to find your information — for a caller, that is usually the telephone number you called from and the restaurant you called. Before we act on a request, we take reasonable steps to verify that it comes from you or from someone authorized to act for you. We respond within the time the applicable law allows.

If your question is about a specific order — the food, the price, or the timing — contact the restaurant directly. They own the order.

Where information is processed

Enkira, Inc. is a Delaware corporation with its principal place of business in New Jersey, and our services are intended for people in the United States. Information we store is held in United States data centers. Some processing happens elsewhere: the AI service that interprets your order routes each request to available capacity, which may be outside the United States, and some of the service providers described above operate in more than one country. If you contact us from outside the United States, you are sending your information to the United States, where privacy laws may differ from those where you live.

Other sites and services

Our website and our messages may link to services we do not control, such as an online payment page or a restaurant's own website. This policy does not cover them, and we are not responsible for their practices. Read their policies before giving them your information.

Changes to this policy

We may update this policy. The date at the top of this page shows when it was last changed. If we make a change that materially affects how we handle your personal information, we will take reasonable steps to bring it to your attention. Continuing to use the services after a change means the updated policy applies.

Contact

Enkira, Inc. — questions about this policy, and requests about your personal information, can be sent through our contact page.