1. Who we are

AgentResto is operated by Titan Studio AI Ltd, a company registered in England and Wales. Our registered address is [ADDRESS - TODO]. We operate the AgentResto platform, a suite of AI agents built for independent restaurants. You can contact us at agents@agentresto.co.uk.

2. What data we collect

We collect: (a) Account data - your name, email, restaurant name, and billing details when you sign up. (b) Usage data - how you interact with our platform, approval actions, content you approve or reject. (c) Restaurant data - menu items, brand details, photos, and social media profiles you share with us during onboarding. (d) Review data - publicly available reviews from Google, TripAdvisor, and other platforms connected to your account. (e) Technical data - IP address, browser type, device information, and cookies.

2a. Messaging data (WhatsApp, Instagram, Messenger)

When you connect WhatsApp Business, Instagram, or Messenger to AgentResto, we store the messages exchanged between your restaurant and its customers so your agents (Bash, Lucia) can reply, take bookings, and hand off to you when needed. We store message content and timestamps, and the sender's contact details (name, phone number, or handle). This data is used only to power your agents' replies and booking flow - never for advertising, and never resold. It's retained for as long as your account is active. See our Data Deletion page to request removal.

2b. Phone calls handled by Hugo

If you enable Hugo, our AI phone agent, it answers calls to the number you connect. Hugo tells every caller at the start of the call that they are speaking to an AI assistant, and tells them if the call is being recorded or transcribed. We store call audio where recording is enabled, transcripts, the caller's number, and any booking or enquiry details the caller gives. This is processed to answer the call, take the booking and give you a record of what was said - never for advertising and never sold. Our lawful basis is legitimate interests, assessed and documented under UK GDPR and PECR, balanced against the caller's interests; you can ask us for a summary of that assessment. Callers can ask to speak to a person at any point, and can ask us to delete their call data.

2c. POS and financial data

If you connect a till, an ordering platform or an accounting package, we process your transaction totals, covers, menu and item performance, supplier invoices and takings so Bruno, Theo, Maya and Remy can do their jobs. This is your business data. We do not use it to benchmark you against other restaurants without asking, and we never sell it.

3. How we use your data

We use your data to: (a) Provide and improve the AgentResto platform. (b) Train your personalised AI agents on your brand voice and content preferences. (c) Send you the morning digest and other operational communications. (d) Process your subscription and billing via Stripe. (e) Respond to your support requests. We do not sell your data to third parties. We do not use your restaurant's brand data to train agents for any other restaurant.

4. Data sharing and sub-processors

We share data only with the providers we need to run the service, each bound by a data processing agreement: Stripe (payments); Anthropic (the large language models that generate your content and replies); Vercel and Railway (hosting); Supabase (database); Postmark (transactional and campaign email); Retell AI and our telephony carrier (phone calls, only if you enable Hugo); Cloudinary (image and video hosting); and the platforms you choose to connect, such as Meta, Google, Deliveroo, Uber Eats, Just Eat, HubRise and Xero. We do not share your data with advertisers, brokers or marketers, and we do not sell it. We will update this list before adding a new sub-processor.

5. Data retention

We retain your account data for as long as your account is active. On cancellation, we hold your data for 30 days to allow reactivation, then delete it within 60 days. Generated content (posts, captions) remains on your connected Instagram/social accounts - deletion of AgentResto does not remove previously published content.

5a. Our lawful basis (UK GDPR)

We process your account and billing data to perform our contract with you. We process restaurant, POS, messaging and call data under legitimate interests - running the agents you have asked us to run - assessed against the rights of the people whose data passes through them. Marketing to you, and any non-essential cookie, relies on your consent, which you can withdraw at any time. Special category data is not something we ask for; please do not send it to us.

6. Your rights (UK GDPR)

You have the right to: access your data, correct inaccurate data, request deletion, object to processing, and data portability. To exercise any of these rights, email us at agents@agentresto.co.uk. We will respond within 30 days.

7. Cookies

We use essential cookies for session management and analytics cookies (Vercel Analytics) to understand usage patterns. Analytics are privacy-preserving and do not use personal identifiers. You can disable cookies in your browser settings, though some features may stop working. Where a non-essential cookie needs consent under PECR, we ask first and default to off. Full detail is on our Cookies page.

8. Security

We use industry-standard encryption (TLS) for all data in transit. Stripe handles all payment card data - we never store card numbers. We regularly review our security practices. If you discover a vulnerability, please report it to agents@agentresto.co.uk.

9. Changes to this policy

We will notify you of material changes via email at least 30 days before they take effect. Continued use of AgentResto after the effective date constitutes acceptance of the updated policy.

10. Contact

Questions? Email agents@agentresto.co.uk or write to Titan Studio AI Ltd, [ADDRESS - TODO], United Kingdom.

Want your data, including WhatsApp/Instagram/Messenger messaging data, deleted? Visit our Data Deletion page.

Privacy Policy