Privacy information

This policy covers ezregulars.com (this marketing site and the business self-service portal) and the WhatsApp ordering bot used by our partner businesses’ customers — restaurants and grocery stores today, and other repeat-purchase local businesses (salons, cleaners, etc.) as the platform grows. Today, EZRegulars operates as the controller for the data described here. As individual businesses join the platform, EZRegulars acts as a processor on their behalf under a separate data-processing agreement, and the business becomes the controller for its own customers’ order data — we will update this policy as real businesses onboard.

The contact form on this site prepares an email in your own email application — it does not submit anything to our servers. We only receive your message, and process the contact details in it, if and when you actually choose to send that email.

Free-text messages you send while ordering (e.g. "2 butter chicken, no onions") are processed by an AI model (Google Gemini) to help figure out what you mean. The AI only ever classifies or extracts information from your message — every fact it identifies (items, prices, availability) is independently checked against the business’s real menu/catalog and your real order before anything happens. No decision with a legal or similarly significant effect on you (e.g. whether your order or payment is accepted) is ever made by the AI alone.

Before we can process your order, we ask for your consent to store and use your phone number and order details (a hard requirement — we cannot take orders without it). Separately, and never blocking your ability to order, we ask whether you’d like occasional offers and promotions on WhatsApp. We record the exact wording you agreed to, a timestamp, and which version of this policy applied. You can withdraw at any time by sending STOP (or STOPP) to the business on WhatsApp; you then choose what to withdraw — just the offers, or everything. If you choose everything, we stop processing your data for ordering and delete any saved sign-in (see §8). We keep a record that the consent was given and withdrawn, and the wording you saw, as evidence that we asked. You can change your reply language at any time the same way.

We keep order and consent records for as long as needed to fulfil orders, handle any dispute or complaint, and meet German statutory retention obligations (commercial/tax records can require retention of up to 10 years). Conversation-context data used only to keep track of an in-progress order is short-lived and cleared once it’s no longer needed for that purpose. We delete or anonymise data once none of these reasons still apply.

We restrict access to personal data to what’s needed to run the service, and rely on our processors’ own security measures (encryption in transit, access controls) in addition to our own. No system is perfectly secure, but we take reasonable, proportionate steps given the scale of the service today.

We’ll update this page as the service changes — for example, once real businesses onboard and the controller/processor arrangement in §2 becomes operative. Last updated: 5 October 2026.