Your information, plainly.

CaterRail runs catering and office lunch ordering for restaurants: the ordering pages a restaurant puts on its own site, the texts and emails about an order, and HQ, where the restaurant runs its orders. When you order from a restaurant that uses CaterRail, the restaurant is who you’re ordering from, and CaterRail handles the order for it. This policy covers what CaterRail does with your information. The restaurant’s own privacy policy covers what it does with the order once it has it.

• Your order: what you ordered, for when and where, the headcount, notes for the kitchen, and any allergies you declare.
• How to reach you: your name, email address and mobile number, and the delivery address and on-site contact you give.
• Your choices: whether you agreed to texts about your order, to lunch group texts, and to offers by email or text, with the words you agreed to and when.
• Payment: your card is taken by Stripe, the payment processor, on the restaurant’s account. CaterRail never sees or stores your full card number.
• Group and lunch group orders: your name for the label on your meal, your pick, and your allergies. If an organizer invites you by email, your address, for that one invitation.
• Restaurant staff using HQ: name, email, password (stored only as a one-way hash), sign-in records and the changes you make.
• Technical basics: your IP address and browser, to keep the service secure and to limit abuse.

To place your order with the restaurant and get it to you: the order itself, the kitchen ticket and labels, updates about it by email and, if you agreed, by text, and the receipt. To run group and lunch group orders, rewards and reorder links the restaurant offers. To keep the service secure and working. To send offers from the restaurant only if you asked for them.

We don’t sell your personal information, and we don’t use it for advertising.

• The restaurant you order from, so it can make and deliver your order and answer your questions.
• Service providers that run parts of CaterRail for us: Cloudflare (hosting and data storage), Stripe (payments), Twilio (texts and calls), and Resend (email). They may use your information only to provide their service to us.
• If the law requires it, or to protect someone’s safety.

We text you only if you agreed to it: updates about your order, a lunch group’s texts, or offers from the restaurant, each by its own choice. Message frequency varies with your orders and your group’s lunches. Message and data rates may apply. Reply STOP to stop and HELP for help, any time.

Mobile numbers and text opt-in consent are never sold, rented or shared with third parties or affiliates for their marketing or promotional purposes. They are shared only with the provider that delivers the messages (Twilio) and with the restaurant you ordered from. See the text message terms.

Receipts and updates about your order always go by email. Offers go only if you asked for them, and every one has an unsubscribe link. Unsubscribing stops that restaurant’s offers; you’ll still get emails about your orders.

Orders are kept as the restaurant’s business records. The words of your text replies are cleared after 30 days. An unsubscribe is kept as a one-way hash of your address, so we can keep honoring it. Staff accounts are kept until the restaurant removes them.

You can ask to see, correct or delete the information CaterRail holds about you by emailing [email protected]. Reply STOP to any text to stop texts. Use the unsubscribe link in any offer to stop offers. Some records may be kept where a restaurant or the law needs them, for example for tax.

Everything travels over encrypted connections. Passwords are stored only as one-way hashes, HQ offers two-step sign-in, and card details stay with Stripe. Access to customer information in HQ is limited to the restaurant’s own team, by location.

CaterRail is for businesses and adults placing orders. It isn’t meant for children under 13, and we don’t knowingly collect their information.

If this policy changes, we’ll update this page and its date. Questions: [email protected]. CaterRail, Syracuse, New York.