Privacy
1.Who
Troy's Diner Inc., 295 Main St E, Milton, ON L9T 1P1, (905) 878-8783, troy@troysdiner.com. Troy Bot is built and operated for the diner by Daybot Solutions (Karan and Mehar Khanna). Google's sign-in screen shows the name Daybot, because Troy Bot signs guests in through Daybot Solutions' Google account; Troy Bot data is not combined with Daybot's other services.
2.What Troy Bot collects
Voice audio (web only), captions of both sides, the order you build on screen (dishes, notes and table number), what you tap in the app, the dishes shown to you, menu lookups the bot makes, the language you pick or speak, your rating and comment, technical details (browser type and its language settings, time zone, screen size, a salted hash of your IP address, connection type and quality, timings), a random visitor id cookie, if you sign up, your name and email or mobile number, and, if you sign in with Google, your Google account id, name, email address (and whether Google verified it), profile photo link, language and, for work accounts, the account's domain. No location and no device fingerprinting. Phone calls: transcript and call timings and the caller's number; no audio recording.
3.Why
To run the voice host; to evaluate and improve how it recommends dishes and serves the diner; to keep your orders and chats under your account if you sign in with Google; to send you diner news only if you ticked the box.
4.Who processes it
OpenAI (runs the voice model and transcription; conversations may be traced in OpenAI's tooling); Cloudflare (Eastern North America: Canada or the United States), which runs the app and stores the database, the recordings and the data copies; Google, only if you use Sign in with Google (its sign-in script loads only when you open the sign-in, and it confirms who you are to us); the phone carrier for calls.
5.How long
Audio and raw event logs: 90 days. Transcripts, ratings, sign-up and sign-in records: until you ask us to delete them. A private copy of this data is kept in our cloud storage and deleted on the same schedule; nightly database copies are kept 35 days and server backups 30 days. Signing out ends the sign-in on that phone.
6.Your choices
You can use the menu without talking; tap End at any time; hang up on the phone; signing in is optional and never adds you to the list, and you can sign out from the home screen at any time; unsubscribe from messages in one tap; ask for a copy or deletion of your data at troy@troysdiner.com (we answer within 30 days; quote the session id shown on the wrap-up screen if you have it).
7.Not sold, no ads
We do not sell personal information or use it for advertising.
8.Consent record
Your tap on "Talk to Troy Bot" is logged with the wording version shown to you. "Add more" and "Talk again" during the same visit reuse that consent.
9.Cookies
tb_v (visitor id, one year), tb_u (signed in with Google, 90 days, renewed while you use it; only if you sign in), tb_admin and tb_admin_device (staff only). Google's sign-in button sets its own cookies (for example g_state) only when you open it.
10.Age
The sign-up list is for adults; do not sign up if you are under 13.
11.Contact and complaints
The diner's email and phone above, or the Office of the Privacy Commissioner of Canada.
12.Changes
Version 2026-10-03.1.