Last updated: August 2026
Callopa provides an AI voice assistant that answers restaurants' phone lines, takes food orders, and gives restaurant owners and staff a dashboard and mobile app to manage those orders. This policy explains what data we collect, why, and how it's handled — across callopa.com, the Callopa dashboard, and the Callopa mobile app.
Callopa acts in two different roles, which matters for who is responsible for what:
For restaurant accounts (owners, managers, and staff who log in to the dashboard or mobile app), Callopa is the data controller — we decide how that account and business data is used, as described below.
For a restaurant's own customers(people who call a restaurant's phone line to place an order), Callopa acts as a data processor on behalf of that restaurant. The restaurant is the controller for its customers' data — Callopa processes call recordings, transcripts, and order details only to provide the ordering service to that restaurant.
Restaurant account data: name, email address, password (stored as a salted hash, never in plain text), role (owner/staff/admin), and login activity.
Restaurant business data: restaurant name, address, phone number, menu, opening hours, delivery settings, and any custom instructions or greeting text an owner configures for their AI assistant.
Caller and order data: when someone calls a restaurant's Callopa-answered line, we process the caller's phone number, a recording of the call, a text transcript, and the resulting order (items, price, delivery address if applicable, and any allergens mentioned during the call).
Notifications: we send new-order alerts to the restaurant by email, and push notifications to the Callopa mobile app via a device token tied to a staff login.
Billing data: subscription plan and status. Payment card details are collected and stored directly by our payment processor, Stripe — Callopa never receives or stores full card numbers.
To operate the phone-ordering service: answering calls, taking orders accurately, and getting them to the right restaurant. To give restaurant staff account access and a dashboard/app to manage their business. To notify restaurants when a new order comes in. To resolve order disputes or quality issues, using the call recording or transcript as a record of what was said. To bill for the subscription. To detect and prevent misuse of the service.
Call recordings are automatically deleted 30 days after the call.
Transcripts and order records are kept for as long as the restaurant's account is active, so owners retain their own order history. A restaurant can request deletion of its historical data by contacting us.
Account data is kept for as long as the account is active, and for a limited period afterward as needed for legal, accounting, or dispute-resolution purposes.
We share data with the service providers that make Callopa work, each only for that purpose:
We do not sell personal data, and we do not share it with third parties for their own marketing purposes.
Callopa is a UK-based service. Some of the providers listed above may process data outside the UK/EEA, including in the United States. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses.
Passwords are stored as salted hashes, never in plain text. All traffic between the app, dashboard, and our servers is encrypted (HTTPS). On the mobile app, login tokens are stored using the device's secure, encrypted storage rather than plain local storage. Access to restaurant data is restricted by account role.
If you're a restaurant account holder, you can access, correct, or request deletion of your account data at any time by contacting us. If you're a restaurant's customer and have a question about how your call or order data was handled, please contact the restaurant you ordered from directly, since they control that data — they can reach us if they need our help fulfilling your request.
UK residents also have the right to complain to the Information Commissioner's Office (ico.org.uk) if they believe their data has been mishandled.
Callopa's dashboard and mobile app are business tools intended for restaurant owners and staff, and are not directed at children.
We may update this policy as the service changes. We'll update the "last updated" date above when we do.
Questions about this policy or your data can be sent to hello@callopa.com.