Privacy policy

Nacho (usenacho.com) is a product of Vance Labs LLC. Nacho is an AI voice host that answers the phone for restaurants: it answers questions, takes orders, and sends order updates by text message.

This policy covers two groups of people: restaurant owners and staff who use the Nacho dashboard, and callers who speak with Nacho on a restaurant's phone line. Questions? Email us at products.vance@gmail.com.

From restaurant accounts: your name, email address, and password (stored only in hashed form); the business information you add, such as your menu, prices, hours, and FAQs; and billing details, which are handled by our payment processor (Stripe). We never see or store full card numbers.

From callers: when you call a restaurant that uses Nacho, your call is answered by an AI assistant. We process your phone number, what is said on the call (calls are transcribed, and may be recorded, so the restaurant can review its orders), your order details, the name you give for your order, and whether you agreed to receive text updates.

Automatically: basic usage information and the session cookie needed to keep dashboard users signed in. On our public website (not the dashboard), we use PostHog, a website-analytics service, to count visits and see which pages lead to demo calls and sign-ups; it sets a cookie in your browser so a returning visitor is recognized. We do not use advertising cookies or advertising trackers.

We use information only to run the service: answering calls and quoting accurate prices, taking and recording orders so the restaurant can prepare them, sending the text messages you asked for, improving how well Nacho understands callers, billing, customer support, and keeping the service secure.

Restaurant owners can choose to connect Nacho to their point-of-sale system (such as Square, Clover, or Toast) so Nacho always has their current menu. Connecting is optional and is done by the owner, who approves it in their POS account.

What we read: menu items, categories, prices, item options and add-ons, whether an item is sold out, and basic business details such as the restaurant's name, location, and opening hours. Our access is read-only: Nacho does not change anything in your POS.

What we don't read: your sales, payments, card data, employee records, or your customer list.

How we use it: only to keep the menu, prices, and hours Nacho uses on calls accurate and up to date. We don't sell this information or use it for anything else. The access keys your POS gives us are stored encrypted.

You can disconnect your POS at any time from the Integrations page in your dashboard, which stops Nacho from reading it. To fully revoke access, also remove Nacho from within your POS account.

Nacho texts only callers who say yes on their call. Near the end of a phone order, Nacho asks, in these words: “Can we text you updates on this order? They come from Nacho for [the restaurant], usually one text per order. Message and data rates may apply, and you can reply STOP anytime.” Callers can simply say no, and ordering never depends on saying yes. The full program, with sample messages, is on our text messages page.

Callers who say yes receive an order confirmation for their phone order, which can include the restaurant's payment link when the order is paid ahead, or a notice if the restaurant can't make the order. We never send marketing texts. Message frequency: usually one text per order. Message and data rates may apply.

You can opt out at any time by replying STOP to any message, or get assistance by replying HELP. We honor opt-outs immediately.

We do not share, sell, or rent your mobile phone number, SMS opt-in status, or text-messaging consent data to any third party or affiliate for their marketing or promotional purposes. Text-messaging data is shared only with our messaging delivery provider, and only as necessary to deliver the messages you asked for.

We share information with the service providers that make Nacho work — voice and telephony, speech transcription and AI processing, text message delivery, payment processing, website analytics, and cloud hosting and database infrastructure. Each provider may use the information only to provide its service to us.

We may also disclose information if the law requires it. We do not sell personal information, and we do not share it with anyone for their own advertising.

We keep information for as long as an account is active or as needed to provide the service. Call recordings and transcripts are kept for up to 180 days and then automatically deleted, both from our systems and from the voice provider that handles the call.

Restaurant owners can delete their account from the dashboard at any time, which permanently deletes the account's data, including its call recordings and transcripts at the voice provider. If any part can't be removed at that moment, we finish removing it shortly after. If you are a caller and would like information about you removed, contact the restaurant you called or email us.

Information is encrypted in transit and at rest with our infrastructure providers, and access is limited to what the service needs. No method of transmission or storage is 100% secure, but we work to protect your information accordingly.

Nacho is not directed at children under 13, and we do not knowingly collect personal information from them.

You can stop receiving texts at any time by replying STOP. You can ask us what information we hold about you, or ask us to delete it, by emailing products.vance@gmail.com.

If we change this policy, we will post the updated version on this page with a new "last updated" date.

Vance Labs LLC · products.vance@gmail.com