The short version
A touch order collects the order itself and nothing about the person. The AI cashier listens only where the merchant has switched it on, and only while an order is in progress. We do not use facial recognition. We do not create or store biometric identifiers. We do not store video of customers. Audio is converted to text to build the order, and we do not sell personal information.
1. Who this covers
Two different groups interact with us, and they are treated differently.
- Merchants — the businesses that license the terminal from us. They have accounts, billing and a contract.
- Guests — members of the public who walk up to a terminal in a merchant's location and place an order. Guests have no account with us.
For guest interactions at a merchant's counter, the merchant is generally the business deciding why the data is collected, and Walletta acts as its service provider.
2. What the terminal collects at the counter
| What | Why, and what happens to it |
|---|---|
| Touch order | The items, options, quantities and total a guest selects on the screen. Kept with the order record. A touch order does not identify the guest. |
| Presence signal (AI cashier only) | The camera detects that a person is standing in front of the terminal so the AI can wake. This is a presence signal only. No image is stored, no face is recognised, no biometric template is created. |
| Voice audio (AI cashier only) | Captured only while an ordering session is active. Converted to text so the order can be understood. Audio is not retained after the session ends. |
| Order transcript (AI cashier only) | The text of what was ordered, including modifiers. Retained with the transaction record so the merchant can reconcile and handle refunds. |
| Order and payment record | Items, prices, time, terminal, and the payment result. Card numbers never reach Walletta — they are handled by the payment processor. |
| Receipt contact | If a guest asks for a digital receipt, the phone number or email they provide, used to send that receipt. |
3. You are talking to an AI
When the AI cashier is on, the face and voice at the terminal are synthetic. The terminal discloses this on screen before an ordering session begins, and a guest can ask for a human at any time by tapping the screen or speaking to staff.
The AI proposes; a deterministic system prices every line against the merchant's real menu. A model does not compute prices.
4. Recording notice at the counter
Because a voice ordering session captures speech, the terminal states on screen, before every session, that it is an automated assistant and that speech is processed to take the order. Merchants agree not to disable or obscure that disclosure.
If you would rather not speak to the terminal, you can order by touch or from a staff member instead.
5. Service providers who process data for us
We use specialist providers to run the terminal. They act on our instructions and are not permitted to use the data for their own purposes.
| Provider | What it handles |
|---|---|
| Deepgram | Converts spoken audio to text |
| Tavus | Generates the video presence of the AI employee |
| Cartesia | Generates the spoken voice of the AI employee |
| OpenAI and Groq | Language models that interpret the order |
| Stripe | Card payments and subscription billing |
| Square | Point-of-sale and kitchen integration, where the merchant uses it |
| Amazon Web Services, Vercel | Hosting and delivery |
This list changes as the product changes. We keep it current on this page.
6. What we collect from merchants
- Business and contact details, and the details of the person who signs up.
- Billing information, processed by Stripe. We do not store full card numbers.
- Menu content, product photography and configuration you upload.
- Usage data: active AI minutes, orders processed, uptime, error logs.
7. How long we keep things
- Voice audio — not retained after the ordering session ends.
- Order records — kept for the life of the merchant account and then as required for tax and accounting.
- Merchant account data — kept while the account is active, then deleted or anonymised.
8. We do not sell your information
We do not sell personal information and we do not share it for cross-context behavioural advertising. Advertising shown on an idle terminal is pre-rendered and is not targeted at the individual standing in front of it.
9. We do not pool one merchant’s counter with another’s
What is said at one merchant’s counter is used to serve that merchant’s counter. We do not combine order data across merchants to train a shared model, and we do not use one merchant’s catalogue, prices or customer behaviour to improve a competitor’s terminal. If that ever changes it would require properly de-identified data and the merchant’s own agreement, and this page would say so before it happened.
10. Your rights in California
Under the California Consumer Privacy Act as amended, you may request to:
- know what personal information we have collected about you and where it came from;
- have it deleted;
- have inaccurate information corrected;
- opt out of any sale or sharing — noting that we do neither;
- limit the use of sensitive personal information.
We will not discriminate against you for exercising any of these rights. To make a request, write to walletta@cashiercrew.com. We will verify the request before acting on it, and we will respond within the time the law allows. An authorised agent may act for you.
11. Security
Payments are handled by a PCI-DSS compliant processor. Access to production systems is limited to people who need it. If a breach affects your information, we will notify you as the law requires.
12. Children
The terminal is a point-of-sale device in a place of business and is not directed at children. We do not knowingly collect personal information from children under 13.
13. Changes
If we change this policy we will update the date at the top. Material changes will be announced to merchants by email.
14. Contact
Walletta, Inc.
Email: walletta@cashiercrew.com
General: temur@cashiercrew.com