Privacy Policy

This policy explains what Word of Dish ("we", "us") collects, why, and the choices you have. It covers restaurant accounts ("owners") and the diners who leave feedback.

Information we collect

• Account data: your name, email, restaurant details, and a hashed password.
• Diner feedback: ratings, text answers, and — when a guest chooses voice — an audio recording and its transcript. Guests provide this voluntarily; we never require personal identity to leave feedback.
• Recovery contact: if an unhappy guest opts in, the email or phone they leave so you can follow up.
• Usage data: events needed to run the service and produce your analytics (scans, submissions, credits used).

How we use it

• To generate an editable review draft from the guest's own words, in their language.
• To score sentiment and produce owner analytics.
• To route unhappy guests to your private recovery channel.
• To operate, secure, and improve the service and to meter usage.

AI processing

We use AI providers (via OpenRouter and Cloudflare Workers AI) to transcribe voice, classify sentiment, translate content, and draft reviews. Drafts are built only from the diner's own answers — never fabricated. We do not sell your data and do not permit it to be used to train third-party foundation models.

Storage & security

Data is stored on Cloudflare infrastructure (D1, R2, and KV) and transmitted over encrypted connections. Passwords are stored only as salted hashes. Captured diner submissions are immutable once recorded.

Voice recordings

When a guest chooses to answer by voice, the audio file is stored as a blob on Cloudflare R2 and used only to produce its transcript and, for a happy guest, the review draft. We keep the recording no longer than needed for that purpose and delete voice audio within 90 days of capture; the resulting transcript is retained with the (immutable) feedback record. Recordings may be processed by our transcription and AI providers — Cloudflare Workers AI and, via OpenRouter, our language-model providers — which may process them on servers located outside the guest's own country. We do not use voice recordings for advertising, and do not permit them to be used to train third-party foundation models.

Sharing

We share data only with processors needed to run the service — our payment merchant of record (Dodo Payments) for billing, and the AI/infrastructure providers above. We do not sell personal information.

Retention & your rights

Owners can request access to or deletion of their account data. Because a captured feedback record is immutable and append-only, we cannot selectively delete the record itself; instead, on a verified request a diner may ask us to anonymize a submission they can identify — dissociating it from their identity (for example, removing recovery contact details) while the underlying feedback remains intact. Where a legal obligation requires it, we will delete or further redact data as needed. Contact hello@wordofdish.com and we will respond within a reasonable period, subject to applicable law.

Cookies

We use a session cookie to keep owners signed in and a language cookie to remember locale. We do not use advertising cookies.

Children

The service is intended for businesses and adults; it is not directed to children under 16.

Changes & contact

We may update this policy and will revise the date above. Questions:hello@wordofdish.com.