Security

Caller data stays yours. Your team stays in charge.

ROAL handles two kinds of information: your menu and your callers' pickup details. Here is what we do with each, in plain language.

Your menu, calls, and tickets live in your account. Other restaurants cannot see them, and staff sign in with their own logins.

Name and phone number for the pickup, stored with the ticket. No card numbers are taken over the phone. Caller data is not sold.

Complaints, catering, allergies, and manager requests go to your team. The host does not invent an order to finish a call.

Tickets are created only from calls on your line, by your host, into your account. There is no public form that writes to your kitchen screen.

Each call keeps its transcript. Each ticket keeps its status history. You can reconstruct a busy night after the fact.

Forward your number when you are ready, and point it back any time from your carrier. Delete your account and its data by emailing us.

For your tech person

Implementation notes

Database access is row-scoped per organization. Application code reads and writes through policies tied to the signed-in user; privileged service access is limited to server-side functions.
Voice tools are signed per restaurant. The phone host can only create or finalize orders for the restaurant it was provisioned for, using a per-restaurant credential that never ships to the browser.
Sessions use standard email and password auth with confirmation links and password reset. Staff accounts are per person, not per device.
Audit data is append-only in practice: call transcripts, cart drafts, and ticket status changes are retained for review.

Need a security questionnaire filled in, or details on data retention? Email vamsi@tryroal.com.

FAQ

What if a caller needs a person?

Catering, complaints, and manager requests are handed to your team. The host does not invent an order to end the call.

What caller data is collected?

Name and phone number for the pickup, stored with the ticket. We do not take card numbers over the phone and we do not sell caller data.

Can other restaurants see my data?

No. Each restaurant's menu, calls, and tickets live in that restaurant's account, and staff sign in with their own logins.

Can someone post fake orders?

Tickets are only created from calls on your line, by your host, into your account. There is no public form that writes to your kitchen screen.

Is there an audit trail?

Every call keeps its transcript, and every ticket keeps its status history, so you can reconstruct what happened on a busy night.