Last updated: 1 August 2026
Axyora operates a service that lets a restaurant take orders over WhatsApp. When you message the WhatsApp number of a restaurant using our service, your messages are processed by our system to record, amend and pass on your order.
This page describes exactly what we process, why, and with whom. It describes nothing else: if a piece of data is not listed here, we do not collect it.
Axyora, a French société par actions simplifiée (SAS), registered under SIREN 990 021 024, with its registered office at 200 rue de la Croix Nivert, 75015 Paris, France.
Contact: contact@axyora.ai
The restaurant you message is the data controller: it takes your order and decides what to do with it. Axyora acts as a processor: we provide the tool and process the data on the restaurant's behalf, on its instructions.
| Data | Why |
|---|---|
| The content of your messages | To understand your order, answer your questions, and keep track of the conversation from one message to the next |
| Your WhatsApp phone number | To reply to you, find your open order, and, for delivery, let the courier reach you |
| Your first name, as shown on WhatsApp | To address you by name, and to identify the order at the counter or at the door |
| Your delivery address | To check the restaurant delivers to you, work out the fee, and pass it to the courier |
| Your location, if you share it | Only to convert it into a postal address. The coordinates are not kept: only the resulting address is |
| Your orders and order history | To prepare the order, charge the right amount, and let you reorder the same thing |
Your messages are interpreted by an automated system, which composes the replies and records your order. It makes no decision producing legal effects concerning you: it grants nothing and refuses nothing. No order is placed without you explicitly confirming a summary showing the items, the service type, the address and the total. You can ask to speak to the restaurant at any point.
If you send a voice note, it is transcribed into text so it can be understood. The audio file is never stored: it is passed to the transcription service and then leaves our memory. Only the resulting text is kept, exactly like a written message.
Payments are handled by Stripe, on a page hosted by Stripe. We never see, receive or store any card details. We only know that an order was paid, and for how much.
Only what is necessary for your order to happen. No data is sold, and none is used for advertising.
| Recipient | What it receives |
|---|---|
| The restaurant | Your order, your first name, and your address for a delivery |
| Meta (WhatsApp) | The messages exchanged: it is the channel itself |
| An artificial intelligence provider (currently OpenAI, United States) | The conversation text, to understand it and compose replies. Voice notes, for transcription |
| Stripe | The amount and order details, for payment |
| Uber Direct | For deliveries only: your address, first name and phone number, so the courier can find you |
| Base Adresse Nationale (French national address database) | The address you give, to verify and normalise it |
| Supabase | Database hosting, within the European Union |
| Hetzner | Hosting for the server that processes the conversations, within the European Union |
| Vercel | Hosting for the pages of this site. No order data passes through it |
Your messages are not used to train its models. That is the default for its programming interface, and we have enabled no option that would allow it.
They may be kept briefly in its abuse-monitoring logs (up to 30 days with our current provider), then deleted. We ask it to retain nothing beyond what its own operation requires.
The database is hosted within the European Union. However, processing messages with artificial intelligence and transcribing voice notes involve a provider established in the United States, which constitutes a transfer outside the Union. That transfer is governed by the European Commission's standard contractual clauses.
This site uses no cookies, no trackers and no analytics. It serves these pages and nothing else.
Traffic to our servers is encrypted (HTTPS). Each restaurant's credentials and keys are encrypted at rest. Access to the data is limited to the people who need it to run the service.
You have the right of access, rectification, erasure, restriction of processing, portability of your data, and objection to its processing.
Write to contact@axyora.ai, or see the data deletion page. We reply within 30 days.
Because the restaurant is the controller, we may pass your request on to the one you contacted.
If our answer does not satisfy you, you may lodge a complaint with the CNIL, the French supervisory authority: cnil.fr/en/plaintes.
The service is not intended for people under 15, and we do not knowingly collect their data.
This page changes as the service does. The date above is the last update; any new recipient appears here before it is used.