Last updated: 25 March 2026
OrderMi is operated by MisoLab ("we", "us", "our"). We are the data controller for information collected about restaurant owners who use the OrderMi platform, and a data processor for customer data collected through restaurant ordering pages.
Contact: support@ordermi.ai
Restaurant owners:
Email address and password (for account authentication); restaurant details you provide (name, address, phone, menu content, branding); subscription and billing information (processed by Stripe — we do not store card details); usage data (feature usage, login times).
Restaurant customers:
When a customer places an order, the restaurant's ordering page may collect: name, phone number, email address, delivery address (for delivery orders), and order details. This data is collected on behalf of the restaurant owner, who is the data controller for their customers' information.
Website visitors:
We collect minimal data from visitors to ordermi.ai: language preference (stored locally in your browser) and information you voluntarily provide through the contact form.
We use personal data to:
Provide and maintain the OrderMi platform; process restaurant subscriptions and billing; send transactional emails (account confirmation, billing notifications); respond to support requests; improve the platform; comply with legal obligations.
We do not sell personal data. We do not use personal data for advertising or marketing to third parties.
OrderMi uses AI (powered by Anthropic's Claude) for menu parsing, translation, and restaurant management assistance (Miso). When you use AI features, your menu content and relevant restaurant data is sent to Anthropic for processing. Anthropic processes this data in accordance with their privacy policy and does not use it to train their models.
The Miso assistant in the admin panel has access to your restaurant settings, menu, and aggregated order statistics to provide contextual help. Individual customer personal data is not sent to the AI.
We use the following third-party services to operate OrderMi:
Supabase — database hosting, authentication, and file storage (EU region). Vercel — application hosting and CDN. Stripe — subscription billing and payment processing. Anthropic — AI processing for menu parsing and Miso assistant. Resend — transactional email delivery.
Each of these services processes data in accordance with their own privacy policies and applicable data protection regulations.
We retain restaurant owner account data for as long as your account is active, plus a reasonable period after closure for legal compliance. Customer order data is retained for the duration of the restaurant's account and a reasonable period thereafter. You can request deletion of your data at any time by contacting support@ordermi.ai.
We take reasonable measures to protect personal data, including: encrypted connections (HTTPS) for all data in transit; secure authentication via Supabase Auth; no storage of payment card details (handled entirely by Stripe); access controls limiting who can access restaurant data.
No system is completely secure. We cannot guarantee absolute security of your data, but we take commercially reasonable steps to protect it.
If you are in the UK or European Economic Area, you have the right to:
Access the personal data we hold about you; rectify inaccurate data; request deletion of your data; restrict or object to processing; data portability (receive your data in a structured format); withdraw consent where processing is based on consent.
To exercise these rights, contact us at support@ordermi.ai. We will respond within 30 days.
When customers place orders through your OrderMi restaurant page, you (the restaurant owner) are the data controller for that customer data. OrderMi acts as a data processor on your behalf. You are responsible for: informing your customers about how their data is used; ensuring you have a lawful basis for collecting customer data; responding to customer data requests.
We display a standard notice on ordering pages informing customers that their data is collected by the restaurant for order fulfilment purposes.
OrderMi uses essential cookies and browser local storage for: authentication (Supabase session tokens); language preference; Miso chat history (admin panel only). We do not use tracking cookies, analytics cookies, or advertising cookies. See our Cookie Policy for full details.
OrderMi is not intended for use by anyone under 18 years of age. We do not knowingly collect data from children.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform.
For privacy-related questions or to exercise your data rights, contact us at support@ordermi.ai.