Privacy Policy
Last updated: May 2026
1. Introduction
Tenor Inc. ("Tenor", "we", "us") is committed to protecting the privacy of our customers and their callers. This Privacy Policy describes how we collect, use, store, and share personal information when you use the Tenor voice AI ordering platform ("the Service").
2. Information We Collect
Account Information
When you register, we collect your name, email address, restaurant name, and payment information. We use this to provide and bill for the Service.
Call Data
When callers interact with Tenor, we process call audio in real time to understand and fulfill orders. We collect caller phone numbers, call duration, and transcripts. Tenor does not record call audio; text transcripts are retained based on your account settings.
Order Data
We process and store order details including items ordered, modifications, totals, and POS synchronization status. This data is shared with your connected POS system to fulfill orders.
Usage Data
We collect analytics on Service usage including call volume, automation rates, order accuracy, and dashboard activity to improve the Service and provide you with insights.
3. How We Use Information
- To provide, maintain, and improve the Service
- To process and fulfill restaurant orders
- To bill for subscriptions and usage
- To provide customer support
- To send transactional communications (receipts, alerts, updates)
- To train and improve our AI models (using anonymized data only)
- To comply with legal obligations
4. Information Sharing
We share personal information only in the following circumstances:
- POS Systems: Order data is transmitted to your connected POS provider (Toast, Square, Clover) to place orders.
- Service Providers: We use Twilio (telephony), Deepgram (speech-to-text), ElevenLabs (text-to-speech), and Anthropic (AI processing) to deliver the Service. These providers process data under contract with us.
- Legal Requirements: We may disclose information if required by law, regulation, or legal process.
5. AI & Transcription Disclosure
Tenor informs all callers at the start of each call that they are speaking with an AI assistant and that the call may be monitored and transcribed for quality. Tenor does not record call audio. This disclosure is designed to support federal and state AI-disclosure and consent laws, including two-party-consent states. You are responsible for ensuring any additional disclosure requirements specific to your jurisdiction are met.
6. Data Security
We use industry-standard security measures to protect your data, including encryption in transit (TLS 1.2+) and at rest, access controls, and regular security assessments. Payment information is processed by Stripe and is never stored on our servers. We do not store PCI-regulated cardholder data.
7. Data Retention
Account data is retained for the duration of your subscription and for 90 days after cancellation. Call transcripts are retained based on your account settings (default: 90 days). Order data is retained for 12 months for analytics purposes. You may request earlier deletion by contacting us.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your personal information
- Export your data in a portable format
- Opt out of certain data processing activities
To exercise these rights, contact us at support@aiondata.io.
9. Children's Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.
11. Contact
For questions about this Privacy Policy, contact us at support@aiondata.io.