Privacy Policy
What AppWT Relay collects, why it collects it, who it goes to, and how long it is kept.
1. Two different roles, and why it matters to you
We handle two kinds of information, and we are responsible for them differently.
- Guest information (a name, phone number, order or reservation) belongs to the restaurant or business you ordered from. We hold and process it on their instructions, as their service provider. If you are a Guest and you want your information corrected or deleted, contact the business you ordered from first. They can act on it immediately. You can also contact us and we will help.
- Operator account information (the business's own account, its staff logins, its billing contact) is information we decide about ourselves. We answer for that directly.
2. What we collect from a Guest
Only what an order needs to be filled:
- the name and phone number given at checkout, so the order can be identified and the Guest reached;
- an email address, where one is given, so an order confirmation can be shown;
- a delivery address, only when the order is for delivery;
- the contents of the order, any choices made, and the totals;
- reservation details, where a table is booked: party size, date, time and any note left.
We do not ask a Guest to create an account, and we do not build a profile of a Guest across different businesses.
3. Card details are never on our servers
This is a fact about how the system is built, not a promise about how we behave.
Card numbers, expiration dates and security codes are entered on the payment processor's own hosted page. They are never sent to, processed by or stored on AppWT servers. What comes back to us is a confirmation that a payment succeeded or failed, the card brand, and the last four digits, so an order can be matched to a payment and a receipt makes sense.
4. What we collect from an Operator
Business name and address, the names and email addresses of staff who are given logins, a password stored only as a one-way hash, sign-in times, and a record of changes made in the console so a business can see who changed a price or a menu.
5. What we collect automatically
Standard web server logs: IP address, browser type, the pages requested and when. These are used to keep the service running and to investigate faults and abuse.
We use one cookie, for the sign-in session and to keep a shopping cart together between pages. It is required for the service to work. We do not run advertising cookies, and we do not run third-party analytics or tracking pixels on the ordering pages.
The public information pages (the home page, How it works, What it does, and these two legal
documents) also carry an accessibility toolbar, a translation button and a cookie notice. The cookie
notice is loaded from appwt.com, our own server. It stores your choice, the date, your region
setting and your browser's name in a cookie named appwt_cookie_consent for one year,
and that cookie is sent only to this website. The accessibility toolbar keeps your display settings
in your own browser's local storage and sends them nowhere. Nothing from Google loads unless you
open the translation panel; if you do and choose a language, Google Translate's script loads from
Google and a googtrans cookie records the language you picked.
This paragraph was added on September 30, 2026, when these tools were added to the public
pages.
6. Who else sees the information
We do not sell personal information, and we do not share it for advertising. We never have.
Information reaches only these parties:
- The business you ordered from. They receive the order and the contact details needed to fulfill it.
- The payment processor that business uses. They receive the payment details directly from the Guest's browser, and they operate under their own privacy policy.
- Our hosting provider, which operates the server the software runs on.
- Law enforcement or a regulator, where we are legally required to respond.
The platform sends no marketing email and no text messages. There is no mailing list behind it and no email provider in the chain.
7. Printed tickets
An order prints in the kitchen or at a station chosen by the business, and that printed ticket may carry a Guest's name, phone number and delivery address. A printed ticket is a paper record in the business's own premises. Handling and disposing of it is the business's responsibility.
8. How long it is kept
Order and reservation records are kept while the business's account is active, because a business needs its own sales history for accounting and tax. When an account closes, its data stays available for export for thirty days and is then deleted on a schedule.
Server logs are kept on a short rotating cycle and then overwritten.
9. Your rights
Depending on where you live, you may have the right to ask what information is held about you, to have it corrected, to have it deleted, and to receive a copy. Some United States state privacy laws, including California's, also give the right not to be discriminated against for exercising those rights.
We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing for a Guest to opt out of on that front.
To make a request as a Guest, contact the business you ordered from, or write to us at sales@appwt.com and we will route it to them and help. We may need to confirm your identity before acting, so that one person cannot request another person's records.
10. Security
Traffic to the service runs over encrypted connections. Passwords are stored as one-way hashes and cannot be read back by us or by anyone else. Access to the console requires a sign-in, and each business can see only its own data.
No system is perfectly secure, and we will not claim otherwise. If a breach affects your information, we will notify you as the law requires.
11. Children
The service is built for businesses and their customers and is not directed at children under 13. We do not knowingly collect information from a child under 13. If you believe we have, contact us and it will be deleted.
12. Changes
If this policy changes in a way that materially affects how personal information is handled, we will update the effective date at the top and give notice to Operators by email before the change takes effect.