Privacy policy

Last updated [DATE]

Draft for legal review, written from what the site and API actually store. Bracketed items need an answer before launch. [LEGAL REVIEW]

Who we are

syrp.net is run by SYRP, a business registered in Ontario, Canada [CONFIRM LEGAL ENTITY]. Questions about this policy or your information go to our privacy contact, [PRIVACY CONTACT NAME], at admin@syrp.net.

What we collect and why

When you ask for a demo or join a waitlist. Your name, restaurant, work email, phone number if you give one, how many locations you run and what you’re interested in. We use these only to contact you about Syrp.

When you get a demo call.

• Your phone number, so Syrp can text you a code and call you.
• The 4-digit code we text you. We store it only in a scrambled (hashed) form and it expires after 10 minutes.
• A record of your consent: the exact wording you agreed to, the time, your IP address and your browser’s user agent. We keep this to show that you asked for the call and the text.
• The conversation itself. It is processed live by our AI service to run the call, and the transcript and order summary are shown on the page. After the call we text you one summary. [CONFIRM WHETHER CALL AUDIO OR TRANSCRIPTS ARE RECORDED AND FOR HOW LONG]

When you talk to Syrp in your browser. Your microphone audio is streamed to our AI service only while the session is open, so it can reply. We don’t ask for your phone number. [CONFIRM AI SERVICE RETENTION]

Every visit. Your IP address, which we turn into a one-way hash to limit how often the demo and forms can be used. Cloudflare Turnstile checks that forms are sent by people, not bots. We measure visits with [ANALYTICS PROVIDER], which doesn’t use cookies.

Calls and recording

Yes, you’re talking to an AI. Syrp introduces itself as the restaurant’s virtual host, an AI, at the start of every demo call. [CONFIRM RECORDING NOTICE FOR ALL-PARTY-CONSENT STATES]

Who we share it with

We don’t sell personal information. We share it only with service providers that help us run the site and the demo, under agreements that limit how they use it:

• Google Cloud, which hosts our servers in the United States.
• Supabase, which hosts our database in Canada (Montréal).
• Telnyx, which places the demo call and sends the code and summary texts.
• Cloudflare, for the bot check.
• Our AI voice services, which run the demo conversation in the United States: Deepgram (speech recognition), Anthropic (language model) and Cartesia (voice). [CONFIRM PROVIDER AND LOCATION]

Some of these providers may process information outside Canada, including in the United States. [CONFIRM]

How long we keep it

• Demo requests and waitlist sign-ups: until you ask us to delete them. [CONFIRM]
• Texted codes: they expire after 10 minutes. [CONFIRM DELETION SCHEDULE]
• Consent records: [RETENTION PERIOD], so we can show consent if asked.
• Demo session records and summaries: [RETENTION PERIOD].

Your choices

• Reply STOP to any text from Syrp and we won’t text that number again.
• Email admin@syrp.net to see, correct or delete the information we hold about you.
• If you’re not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Children

syrp.net is for restaurant owners and their teams. It isn’t meant for children.

Changes

We’ll update the date at the top when this policy changes, and tell you directly about significant changes where we can.