Français
Your data, in plain words

Privacy Policy

What we process when you order over WhatsApp, why, and with whom. If a piece of data is not listed here, we do not collect it.

LAST UPDATED: 1 AUGUST 2026

Axyora operates a service that lets a restaurant take orders over WhatsApp. When you message the WhatsApp number of a restaurant using our service, your messages are processed by our system to record, amend and pass on your order.

This page describes exactly what we process, why, and with whom. It describes nothing else: if a piece of data is not listed here, we do not collect it.

Who we are

Axyora French société par actions simplifiée (SAS), variable capital
SIREN990 021 024
Registered office200 rue de la Croix Nivert, 75015 Paris, France
Contactcontact@axyora.ai

Who is responsible for what

THE RESTAURANT

Data controller. It takes your order and decides what to do with it.

AXYORA

Processor. We provide the tool and process the data on the restaurant's behalf, on its instructions.

What we process

DATAWHY
The content of your messagesTo understand your order, answer your questions, and keep track of the conversation from one message to the next.
Your WhatsApp phone numberTo reply to you, find your open order, and, for delivery, let the courier reach you.
Your WhatsApp first nameTo address you by name, and to identify the order at the counter or at the door.
Your delivery addressTo check the restaurant delivers to you, work out the fee, and pass it to the courier.
Your location, if you share itOnly to convert it into a postal address. The coordinates are not kept: only the resulting address is.
Your ordersTo prepare the order, charge the right amount, and let you reorder the same thing.

Our legal basis

Performance of the contract The contract between you and the restaurant, for everything needed to take, prepare, charge for and deliver your order.
Legitimate interest The restaurant's interest in keeping a record of an exchange, so it can handle a complaint and understand what happened.
Legal obligation For the data the restaurant's accounting requires it to keep.

Automated processing

Your messages are interpreted by an automated system, which composes the replies and records your order. It makes no decision producing legal effects concerning you: it grants nothing and refuses nothing.

No order is placed without you explicitly confirming a summary showing the items, the service type, the address and the total. You can ask to speak to the restaurant at any point.

Voice messages

If you send a voice note, it is transcribed into text so it can be understood. Only the resulting text is kept, exactly like a written message.

The audio file is never stored. It is passed to the transcription service and then leaves our memory.

Payment

Payments are handled by Stripe, on a page hosted by Stripe.

We never see, receive or store any card details. We only know that an order was paid, and for how much.

Who we share with

Only what is necessary for your order to happen. No data is sold, and none is used for advertising.

The restaurant Your order, your first name, and your address for a delivery.
Meta (WhatsApp) The messages exchanged: it is the channel itself.
AI provider · OpenAI, United States The conversation text, to understand it and compose replies. Voice notes, for transcription.
Stripe The amount and order details, for payment.
Uber Direct For deliveries only: your address, first name and phone number, so the courier can find you.
Base Adresse Nationale · French national address database The address you give, to verify and normalise it.
Supabase Database hosting, within the European Union.
Hetzner Hosting for the server that processes the conversations, within the European Union.
Vercel Hosting for the pages of this site. No order data passes through it.

What the AI provider does with your messages

Your messages are not used to train its models. That is the default for its programming interface, and we have enabled no option that would allow it.

They may be kept briefly in its abuse-monitoring logs (up to 30 days with our current provider), then deleted. We ask it to retain nothing beyond what its own operation requires.

Transfers outside the European Union

The database and the server are hosted within the European Union. However, processing messages with artificial intelligence and transcribing voice notes involve a provider established in the United States, which constitutes a transfer outside the Union. That transfer is governed by the European Commission's standard contractual clauses.

How long

Open basketExpires after a short period of inactivity.
ConversationsKept so the thread makes sense and so the restaurant can find an exchange if you raise a complaint.
OrdersKept for the restaurant's accounting obligations.

Cookies

This site uses no cookies, no trackers and no analytics. The fonts and the single script on these pages are served from this domain: no request goes to a third party.

Security

Traffic to our servers is encrypted (HTTPS). Each restaurant's credentials and keys are encrypted at rest. Access to the data is limited to the people who need it to run the service.

Your rights

You have the right of access, rectification, erasure, restriction of processing, portability of your data, and objection to its processing.

Because the restaurant is the controller, we may pass your request on to the one you contacted.

A question about your data? Write to us: we reply within 30 days.
contact@axyora.ai Data deletion

If our answer does not satisfy you, you may lodge a complaint with the CNIL, the French supervisory authority: cnil.fr/en/plaintes.

Minors

The service is not intended for people under 15, and we do not knowingly collect their data.

Changes

This page changes as the service does. The date above is the last update; any new recipient appears here before it is used.