Privacy Policy

1. Information We Collect

We collect information you provide directly:

• Contact info: name, phone number, email address
• Order info: items ordered, delivery address, payment method (processed by Clover — we do not store card numbers)
• Account info: loyalty points, referral history, communication preferences
• Communications: SMS conversations, voice call recordings (with disclosure per PA law), customer service interactions

We automatically collect:

• Device info: browser type, operating system, device identifiers
• Usage info: pages visited, items viewed, time spent, referring URL
• Location info: delivery address, IP-based approximate location

2. How We Use Your Information

• Process and deliver your orders
• Send order confirmations and delivery updates via SMS and email
• Manage your loyalty account and referral rewards
• Send marketing messages (with your consent — see SMS Terms)
• Improve our menu, service, and website
• Prevent fraud and abuse
• Comply with legal obligations
• Measure advertising effectiveness (via server-side tracking)

3. Information Sharing

We share your information with:

• Payment processor: Clover (processes your payment securely)
• Communication providers: Telnyx (SMS/voice), Resend (email)
• Marketing platform: Klaviyo (email/SMS campaigns, only if you opt in)
• Analytics: Google Analytics, Meta (via server-side tracking with hashed identifiers)
• AI services: Retell AI (voice ordering), OpenAI (SMS ordering) — conversation data is processed but not used to train third-party models
• Hosting: Vercel (website), Supabase (database), Upstash (caching)

We do not sell your personal information. We do not share your data with third-party food delivery platforms (DoorDash, UberEats, Slice, etc.).

4. Cookies and Tracking

We use essential cookies for authentication and cart persistence. We use server-side tracking (Meta Conversions API, Google Enhanced Conversions) to measure ad effectiveness — this sends hashed, non-reversible identifiers rather than raw personal data. See our Cookie Policy for details.

5. Data Retention

We retain your account data for as long as your account is active. Order history is retained for 3 years for business and tax purposes. You may request deletion of your account at any time — we will delete your personal data within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and data
• Opt out of marketing communications (text STOP or use account settings)
• Request a copy of your data in portable format

To exercise these rights, contact us at (717) 334-6002 or visit your account settings.

7. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, contact us at the number above.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted database storage, role-based access controls, and rate limiting. Payment data is handled entirely by Clover's PCI-DSS compliant systems. However, no system is 100% secure, and we cannot guarantee absolute security.

9. Children

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

10. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via email or SMS. Your continued use of the Service after changes constitutes acceptance.

11. Contact

Pizza House Gettysburg
Gettysburg, PA
Phone: (717) 334-6002