Loyalz
EspañolLog in

Privacy Policy

Last updated: February 12, 2026

1. Introduction

Loyalz ("we", "our" or "the Platform") is an artificial intelligence platform designed to help restaurants automate customer service through channels like WhatsApp and phone calls. This Privacy Policy describes how we collect, use, store, and protect the personal information of our users and the end customers of restaurants that use our platform.

2. Information We Collect

2.1 Restaurant data (platform users)

  • Registration data: name, email, restaurant name, location(s).
  • Configuration data: schedules, menus, reservation policies, AI agent knowledge base.
  • Integration data: access tokens for Google Calendar, Cal.com, or other connected third-party services.
  • Billing data: securely processed by Stripe. We do not store credit card numbers.

2.2 End customer data (diners)

  • Contact data: name, phone number, and/or email provided during conversations.
  • Conversations: transcripts of interactions with the AI agent via WhatsApp or phone calls.
  • Reservation data: date, time, party size, special notes.
  • Reviews and feedback: ratings and comments submitted through the platform.

2.3 Technical data

  • IP address, browser type, device, operating system.
  • Cookies and similar technologies for authentication and session management.

3. How We Use Information

  • Operate and improve the platform and AI agents assigned to each restaurant.
  • Manage reservations, respond to inquiries, and escalate issues to the restaurant team.
  • Send operational notifications (reservation confirmations, reminders, review requests).
  • Generate aggregate analytics for restaurants about their agent usage.
  • Process payments and manage subscriptions.
  • Comply with applicable legal obligations.

4. Legal Basis for Processing

We process personal data based on:

  • Contract performance: to provide the service contracted by the restaurant.
  • Legitimate interest: to improve the platform and prevent fraud.
  • Consent: when required by applicable law, for example for marketing communications.

5. Data Sharing

We do not sell personal data. We share information only with:

  • Service providers: ElevenLabs (voice processing and AI), Supabase (database), Stripe (payments), Resend (email), Twilio (telephony).
  • Restaurants: each restaurant only accesses data from its own locations and customers.
  • Legal requirements: when necessary to comply with the law, legal process, or a government request.

6. Data Security

We implement technical and organizational security measures to protect personal data, including:

  • AES-256-GCM encryption for integration tokens.
  • Row-level security (RLS) policies in the database to isolate data between organizations.
  • Secure authentication with JWT tokens and httpOnly cookies.
  • Encrypted communications via HTTPS across the entire platform.

7. Data Retention

  • Account data: as long as the restaurant account is active, and up to 30 days after deletion.
  • Conversations: retained for 12 months from the date of interaction, unless the restaurant requests early deletion.
  • Billing data: according to applicable legal and tax requirements.

8. User Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data.
  • Rectify inaccurate or incomplete data.
  • Request deletion of your data.
  • Object to processing or request its restriction.
  • Data portability.
  • Withdraw your consent at any time.

To exercise these rights, contact privacy@loyalz.com.

9. Cookies

We use strictly necessary cookies for authentication and platform operation. We do not use advertising tracking cookies.

10. Third-Party Services

Our platform integrates third-party services that have their own privacy policies:

  • ElevenLabs — voice processing and artificial intelligence
  • Stripe — payment processing
  • Supabase — infrastructure and database
  • Resend — email delivery
  • Twilio — telephony and messaging
  • Google Calendar / Cal.com — calendar management

11. Minors

Loyalz is not directed at individuals under 18 years of age. We do not knowingly collect data from minors.

12. Changes to this Policy

We may update this Privacy Policy periodically. We will notify significant changes by email or through a visible notice on the platform. The date of last update is indicated at the beginning of this document.

13. Contact

If you have questions about this Privacy Policy or about the processing of your data, you can contact us at:

  • Email: privacy@loyalz.com
  • Web: loyalz.com