Privacy Policy

Who we are

Orange Taco LLC runs Orange Taco, a restaurant at 1200 McKinney Street, Houston, Texas 77010. This policy explains what we collect when you order, book, apply, sign in, or call us, what we do with it, and what you can ask us to do. Questions go to hello@orangetaco.co.

What we collect

• When you order food or shop: your name, phone number, email, what you ordered, and for shipped orders, the delivery address. The kitchen sees your name and phone number on the ticket.
• When you book catering, a tasting, or an event: your name, phone number, email, the date and party size, and the names and emails of guests you add.
• When you write a kitchen note: an allergy or dietary need, for a seat or an order. See "Allergy and kitchen notes" below.
• When you buy at our counter: if you give the cashier your phone number or email, that purchase joins your record.
• When you sign in or keep an account: your email, your phone number, the name and photo you choose, and any other emails, numbers, or organizations you add.
• When you apply for a job: your name, email, phone number, your answers, and your resume.
• When you sign up for news: your email, for the updates you asked for.
• When you host an event with us: your organizer name, logo, and description appear on our site.
• When you visit our site: your device's IP address and browser details, which our site host, database, and payment processor log to run and protect the site.

We connect these to one record for you, by your email and phone number, so your history is in one place when you sign in.

Allergy and kitchen notes

• We ask so the kitchen can cook for you safely. Writing a note is your consent to that use.
• We use it to prepare and serve your meal. It appears on the kitchen's order and in that seat's booking email. We do not use it for marketing or the Circle, and we do not sell it.
• We delete it 30 days after your date.
• You can leave it blank and tell us in person.

Your record and the Circle

• Your visits and what you spend across our menu, shop, events, catering, and tastings are counted on your record.
• Circle standing is worked out from those counts automatically. It opens access and offers.
• To keep counter purchases off your record, do not give your number or email at the counter, or write to us and we stop linking them.

Our phone line

Calls to (844) 519-2433 are answered by an AI assistant. When it answers, it says it is an AI and that the call is transcribed. We do not record the audio.

• We keep your phone number, when you called, and a short summary of the call.
• The transcript is deleted after 90 days. We remove card numbers we detect before it is stored. Do not say one on the call - we do not take payment by phone.
• So it can recognize you next time, the assistant keeps short notes about your calls for 90 days.
• A message you leave for the team is stored and emailed to our staff.
• Our staff read transcripts to check and improve how the line answers. The services that run the line process them to do that work.

Payments

You pay through Stripe. You type your card into Stripe's own fields, so we never see or store your full card number. We keep only the last four digits, the card type, and Stripe's reference. For a tasting reservation, Stripe keeps your card on file so we can charge the fee described when you book.

How we use it

• To make, deliver, and take payment for what you ordered or booked, and to contact you about it.
• To show you your own history when you sign in.
• To count your visits for the Circle.
• To review job applications.
• To send the emails you signed up for. Each one has an unsubscribe link.
• After an order, we may send you one email asking for a review.

We do not sell your information.

Texts

We send three kinds of texts, and only when you ask: a code when you sign in or confirm your number, a link you ask for during a call, and offers, if you turn them on in your account. The details are in our Terms of Use. We do not sell, rent, or share your mobile number, or your consent to receive texts, with third parties or affiliates for their marketing.

Who we share it with

Companies that run parts of our service for us receive what they need for their part. They include:

• Supabase, which stores our records.
• Stripe, which takes payments.
• Heartland, our point-of-sale system, which receives your order, name, and phone number. Counter receipts come back to us so a purchase can join your record.
• EasyPost, which receives the address for shipped orders.
• Webflow, which hosts our website and receives job application files.
• Resend, which sends our emails.
• Bird, which sends our sign-in codes and the texts you ask for during a call.
• LiveKit, which carries phone calls, and the speech and AI services it uses to turn speech into text, write the assistant's replies, and speak them.
• Google, which checks job applications for spam, serves some fonts and maps, adds tickets to Google Wallet if you choose, and holds the Google reviews you choose to leave.
• Microsoft, which signs in our staff.

If you book an event a partner hosts, that partner may receive your name, email, and booking details for that event. They do not receive your payment details.

If Orange Taco LLC's business is sold, merged, or reorganized, your information may move with it, and whoever receives it must follow this policy.

We may also share information when the law requires it.

Cookies and your browser

We keep a few things in your browser so the site works: your bag, a code that brings your bag back on your next visit, your sign-in session, and, if you claim an offer, your email. Our site host sets a cookie to protect the site. On pages where you pay, Stripe sets its own cookies to prevent fraud. On our careers page, Google reCAPTCHA sets cookies to stop spam. Fonts load from Google and Adobe. If we add analytics or advertising tools, we update this policy before they go live.

How long we keep it

• Call transcripts: 90 days. The assistant's notes about your calls: 90 days.
• Allergy and kitchen notes: 30 days after your date.
• A bag you never checked out: 30 days.
• Job applications and resumes: until you ask us to delete them.
• Everything else: until you ask us to erase it, except what we must keep for payments and taxes.

Your rights

• Sign in to see your history, change your name and photo, and remove an email or phone number you have not confirmed.
• Ask for a copy of what we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to erase your record. We remove your details, your account, and your photo. We keep order and payment records where the law requires, and the companies above keep their own records under their own policies.
• Unsubscribe from any email you signed up for with the link in it. Reply STOP to texts from our number.

Write to hello@orangetaco.co. We answer within 45 days. If we say no, reply "Appeal" and we answer within 60 days. If you still disagree, you can contact the Texas Attorney General. We do not sell your information or use it for targeted advertising, so there is nothing to opt out of there.

Children

Our site is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, email us and we will erase it.

Keeping it safe

We limit access to your records to the staff and systems that need them. Account photos are kept private. Card details go straight to Stripe and do not pass through our servers. If a breach affects your information, we tell you as the law requires.

Changes

When this policy changes, we update the dates at the top of this page.