Draft to be reviewed by a lawyer before relying on it for a regulated or high-revenue business.
Privacy Policy
Last updated October 2, 2026
Orderable collects as little as it can. The open-source software sends us nothing. This site has no analytics, no ads and no cookies. This page explains what the hosted demo and chat bots do with the little they receive.
Who is responsible
This site and the hosted Orderable services are run by [LEGAL NAME OF OPERATOR], [MAILING ADDRESS], Halifax, Nova Scotia, Canada. The person responsible for personal information is [NAME OF PERSON RESPONSIBLE FOR PERSONAL INFORMATION], reachable at [CONTACT EMAIL].
If you run the open-source Orderable software yourself, or a food business runs it for you, that operator is responsible for the data it handles, not us. We never receive data from self-hosted installs.
What we collect, and why
| Where | What | Why | Kept for |
|---|---|---|---|
| Visiting this website | Standard request data such as IP address, browser user agent and the page requested, recorded by our host. | Delivering the site, security and abuse prevention. | Per our host's log retention (Vercel). |
| Live demo and demo MCP endpoint | The tool calls you send, such as menu searches, quotes and test orders, including any name, email, phone or address you type in. | Running the demo you asked for. | In memory only, lost when the server instance restarts. Demo orders are never sent to a real business (DRY_RUN). |
| Telegram and Slack bots | Your messages to the bot, your display name and handle or user ID, and any contact details you give for an order. | Replying to you and placing the order you confirm. | In memory for the conversation, reset after 2 idle hours or a server restart. |
| Early access requests | Whatever you write in the GitHub issue you open. | Following up on your request. | Until you or we delete the issue. GitHub issues are public. |
We do not sell personal information, share it for advertising, or use it to build profiles. We do not take payment card details: food orders are paid to the business directly, at pickup, on invoice, or on the business's own payment page.
Who processes it for us
- Vercel hosts this site and its API routes.
- Anthropic runs the Claude model behind the Telegram and Slack bots. Your chat messages and the tool results needed to answer them are sent to Anthropic's API to generate replies, under Anthropic's commercial terms.
- Telegram and Slack carry messages between you and the bot, under their own privacy policies.
- GitHub hosts the code and early-access issues, under its own privacy policy.
These providers may process data outside Canada, including in the United States, where it may be accessible to authorities under local law.
Your rights
You can ask to access, correct or delete personal information we hold about you, or withdraw consent, by emailing [CONTACT EMAIL]. We answer within 30 days. Because the demo and bots keep data only in memory, there is usually nothing left to delete; we will confirm either way. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada, or to your local data protection authority if you are in the EU or UK.
Children
Orderable is built for businesses and adults ordering food. It is not intended for anyone under 18, and we do not knowingly collect children's data.
Security
Traffic is encrypted in transit. The hosted MCP endpoint requires a token, bot webhooks verify the platform's signature or secret, and the demo stores nothing on disk. No system is perfectly secure; tell us at [CONTACT EMAIL] if you find a problem.
Changes
We will update the date above when this policy changes, and describe material changes on this page.
Contact
[LEGAL NAME OF OPERATOR], [MAILING ADDRESS], Halifax, Nova Scotia, Canada · [CONTACT EMAIL]