Privacy Policy

Information we collect

When you place an order through a restaurant powered by Naan, we collect the information needed to fulfill it: your name, phone number, order details, payment confirmation (payment card details are processed by our payment processor and never stored by us), and delivery address if you choose delivery. When restaurants sign up, we collect business contact information. If you contact us, we keep the correspondence.

We also process technical and security information such as IP address, browser or device information, and request logs to secure the service and prevent abuse. For checkout SMS consent evidence, we store a one-way keyed hash derived from the IP address rather than the raw address.

How we use it

We use your information to process and deliver orders, send transactional order notifications, provide customer support, prevent fraud, and operate and improve the platform. We do not sell your personal information.

SMS / text messaging

We send transactional order texts only when you enter a mobile number and affirmatively select the optional SMS checkbox at checkout. Consent is recorded for that specific order and is not required to make a purchase. Messages may include receipt, confirmation, pickup or delivery status, cancellation, refund, and final receipt updates. Frequency varies by order, typically up to six messages per order. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help. See our Terms & Conditions and public SMS consent disclosure.

We do not sell, rent, or use mobile numbers, SMS opt-in data, or consent records for third-party marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties. Vendors that transmit messages for Naan may process this information only on our behalf to deliver and support the messages you requested; they may not use it for their own purposes. We do not use transactional checkout consent for marketing.

Sharing

We share information only with service providers needed to run the platform: our payment processor (Stripe), our messaging provider (for order texts), delivery partners when you choose delivery, and our infrastructure providers — each only what they need. We may disclose information if required by law. The restaurant you order from receives your order details so it can prepare and hand off your order.

Retention & security

We keep order, SMS consent, fraud-prevention, and security records as long as reasonably needed for operations, support, legal obligations, and to document consent, then delete or de-identify them. We use industry-standard safeguards, including encryption in transit and access controls, to protect your information.

Your choices

You can opt out of texts at any time (reply STOP), and you can email contact@hellonaan.ai to request access to or deletion of your personal information. California residents may have additional rights under the CCPA; contact us to exercise them.

Children

Naan is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided information to us, contact us so we can address it.

Changes

We will post any updates to this policy on this page with a new effective date.