Privacy Policy

1. Introduction

Loman AI, Inc. ("the Company," "we," "us," or "our") operates the website getloman.org and the Loman AI phone-answering service (collectively, the "Service"). The Company is a Texas-based hospitality-technology company that provides AI voice handling for independent restaurants, taking orders, booking reservations, and answering frequently asked questions on behalf of restaurant operators.

This Privacy Policy explains what information we collect through the Service, how we use it, and the choices you have. It applies to restaurant operators who subscribe to our Service, to callers whose calls are answered by Loman on behalf of a restaurant, and to visitors to our website.

We are based at 1400 East 6th Street, Suite 210, Austin, TX 78702 and can be reached at [email protected].

2. Information We Collect

2.1 Restaurant Operator Account Information

When you sign up for Loman as a restaurant operator, we collect:

• Contact details: name, email address, phone number;
• Restaurant information: restaurant name, address, business hours, menu FAQs, and the custom greeting script you provide;
• Staff notification preferences: email addresses or SMS numbers you designate to receive call summaries;
• Billing information processed by our payment provider (we do not store full payment card numbers).

2.2 Caller Data Processed on Behalf of Restaurants

Our core function is answering phone calls placed by your restaurant's customers. When Loman answers a call, we process:

• The caller's phone number (from the inbound call);
• The spoken content of the call, including caller-provided name, order items and quantities, reservation details (party size, date, time), waitlist requests, and questions;
• Any special requests or notes the caller communicates.

This call content is processed solely to generate an accurate structured summary (order, reservation, or message record) and deliver it to your staff. We do not use caller audio to train AI models without explicit written consent from the restaurant operator. Raw call audio is retained only as long as needed to produce the summary, typically no more than 72 hours, then permanently deleted. Structured summaries (order details, reservation records) are retained in your account until you delete them or close your account.

2.3 Information Collected Automatically from Website Visitors

When you visit getloman.org, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.4 We Do Not Knowingly Collect Children's Data

getloman.org is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Provide and operate the Loman AI phone-answering service on behalf of restaurants;
• Generate call summaries, order records, and reservation confirmations and deliver them to restaurant staff;
• Manage operator accounts, process subscriptions, and send service-related communications;
• Respond to operator inquiries and provide customer support;
• Measure and improve call-handling accuracy and service quality;
• Detect, investigate, and prevent fraud or abuse;
• Comply with applicable state law and other legal obligations.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Restaurant operators: call summaries containing caller-provided information (name, order, reservation) are delivered to the subscribing restaurant as the intended output of the Service;
• Service providers acting on our behalf (for example, telephony infrastructure, email delivery, hosting, and analytics) under contractual confidentiality terms;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described above, to comply with legal or accounting obligations, and to resolve disputes. Specifically:

• Raw call audio: deleted within 72 hours of call completion;
• Structured call summaries and order records: retained in your operator account and deleted when you close your account or request deletion;
• Operator account information: retained for the duration of your subscription and for up to 24 months after closure for legal and billing purposes;
• Inactive marketing-list contacts: purged after 24 months;
• Website server access logs: retained 90 days, then aggregated.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. Call audio and transcription data are encrypted at rest. No system is perfectly secure; we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable state law.

9. Texas Residents (TDPSA)

Under the Texas Data Privacy and Security Act ("TDPSA"), Texas residents have the rights described below regarding personal data we control or process.

9.1 Your TDPSA Rights

• Right to Confirm and Access: confirm whether we are processing your personal data and obtain access to it.
• Right to Correct: correct inaccuracies in your personal data.
• Right to Delete: request deletion of personal data we have collected from or about you.
• Right to Data Portability: obtain a portable copy where we maintain it electronically and where technically feasible.
• Right to Opt Out: opt out of targeted advertising, sale of personal data, and profiling for decisions producing legal or similarly significant effects. We do not engage in any of these activities.

9.2 Sensitive Data Consent

If we ever process sensitive data as defined under TDPSA (for example, precise geolocation, biometric, or health data), we will obtain your prior consent. The Service does not currently process such data.

9.3 How to Exercise

Email [email protected]. We respond within 45 days; one 45-day extension is available with notice to you.

9.4 Appeal

If we deny your request you may appeal by replying to our response. If denied on appeal, contact the Office of the Texas Attorney General Consumer Protection Division.

9.5 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: