North Valley Technologies LLC (d/b/a OrderLine) ("OrderLine," "we," "us," or "our") is the data controller and operates the SMS ordering platform available at orderlinesms.com and app.orderlinesms.com. This Privacy Policy explains how we collect, use, disclose, and protect information about you.
This policy applies to:
From Restaurant Operators: Business name, address, and contact information; email address and password (hashed); payment and billing information (processed by Stripe — we do not store card numbers); menu content; business rules and operating hours.
From End Customers (Ordering by SMS): Mobile phone number; order content (items, special instructions); order history associated with a phone number.
Automatically Collected: IP addresses and access logs; browser/device type when accessing the web portal; SMS message logs (timestamps, delivery status).
| Purpose | Legal Basis |
|---|---|
| Process and deliver orders via SMS | Performance of service |
| Send order confirmations and updates | Performance of service / SMS consent |
| Operate and improve the platform | Legitimate interests |
| Send onboarding and billing emails to restaurant operators | Contract / Legitimate interests |
| Detect fraud and prevent abuse | Legitimate interests |
| Comply with legal obligations | Legal obligation |
| Respond to support requests | Legitimate interests |
We do not use end customer SMS data for marketing purposes. We do not sell personal information.
For end customers: By texting an OrderLine-powered phone number to place an order, you consent to receive SMS messages related to your order (confirmations, updates, and follow-up). Message frequency varies by order activity. Standard message and data rates may apply. Reply STOP at any time to opt out. Reply HELP for assistance.
For restaurant operators: We may send transactional SMS messages related to your account. You may opt out by contacting support@orderlinesms.com.
| Third Party | Purpose | Data Shared |
|---|---|---|
| Twilio | SMS delivery infrastructure | Phone numbers, message content |
| SendGrid (Twilio) | Transactional email | Email addresses, names |
| Stripe | Payment processing | Billing info, order amounts |
| Railway | Hosting and database infrastructure | All platform data (encrypted at rest) |
| Anthropic | AI-assisted support email triage | Support email content |
We do not sell, rent, or trade personal information to third parties for marketing purposes. We may also disclose information in response to a valid legal process or to protect the rights and safety of OrderLine, our customers, or the public.
OrderLine does not share your mobile phone number or SMS opt-in information with third parties or affiliates for marketing or promotional purposes.
If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, request correction of inaccurate data, and opt out of any sale of personal information (we do not sell data).
To exercise these rights, email support@orderlinesms.com with subject line "California Privacy Request." We will respond within 45 days. We will not discriminate against you for exercising your rights.
| Data Type | Retention Period |
|---|---|
| Order history | 2 years from order date |
| Restaurant account data | Duration of subscription + 1 year |
| SMS logs | 90 days |
| Support communications | 3 years |
| Billing records | 7 years (tax/legal requirement) |
End customers may request deletion of their phone number and order history at any time by texting DELETE or emailing support@orderlinesms.com.
We use TLS encryption in transit (HTTPS enforced), encrypted database storage, Redis session management, and strict environment variable management with no hardcoded secrets. If we become aware of a data breach affecting your information, we will notify you as required by applicable law.
Our platform is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children. Contact us immediately if you believe we have done so.
We may update this policy from time to time. If we make material changes, we will post the updated policy at orderlinesms.com/privacy and notify restaurant operators by email at least 14 days before changes take effect.
OrderLine
support@orderlinesms.com
orderlinesms.com
For California privacy requests, use subject: "California Privacy Request"
For data deletion requests, use subject: "Data Deletion Request"