Privacy policy
Last updated 4 August 2026
This explains what Trayline collects, why, who else sees it, and what you can ask us to do about it. It covers both the businesses who use Trayline and the customers who order through their link.
1.Who is responsible for what
Trayline is operated by Trayline LLC, a limited liability company registered in the State of Delaware, United States of America. There are two different relationships here and they matter:
- Business accounts. For the people who run a business on Trayline — owners, managers, employees — we are the controller. We decided to collect that information and we decide what happens to it.
- Customer orders. For the people who order from a business, that business is the controller and we are a processor. We hold the information on their instructions and do not use it for our own purposes. If you ordered from a business and want your data removed, ask them — and tell us if they do not respond.
2.What we collect
From businesses: name, email address, the business's name, address, country, currency and timezone, the role each person holds, and ordinary technical logs of the service being used.
From customers ordering: name, email address, phone number where given, delivery address and delivery contact where relevant, what was ordered, any note left on the order, and any dietary requirements declared.
We do not collect payment card details. Trayline does not process payments.
3.Dietary and allergen information
Information about what somebody must avoid can be information about their health.
When a customer declares an allergy on an order, that is recorded so the business can fulfil the order safely. In the UK and the EU this may count as a special category of personal data, which carries extra protection. It is used for one purpose only — fulfilling that order — and is visible to the business and to us as their processor. It is never used for marketing, never sold, and never shared beyond the sub-processors listed below.
4.Why we use it
- To run the service you asked for — taking orders, sending confirmations, organising kitchen work, producing invoices. (Performance of a contract.)
- To keep the service secure and to investigate abuse. (Legitimate interests.)
- To meet legal obligations, such as keeping financial records. (Legal obligation.)
- To reply to you when you register interest or contact us. (Legitimate interests.)
We do not sell personal information, and we do not use it to train machine learning models.
5.Who else sees it
Only the services needed to run Trayline. Each is bound to protect the data and to use it only for what we ask.
| Service | What it does | Where |
|---|---|---|
| Supabase | Database, authentication and file storage | United States |
| Resend | Sending transactional email — order confirmations, invites, notifications | United States |
| Vercel | Application hosting | United States |
We may also disclose information where the law requires it. If Trayline is ever sold, data may transfer with it, and we will say so in advance.
6.Cookies
Trayline uses cookies strictly to run the service: keeping you signed in, and — during a support session — showing the banner that says one is in progress. We do not use advertising or third-party tracking cookies, so there is no consent banner to click past.
7.Where data is held
Our providers are based in the United States, so information may be transferred and stored outside your country. Where data is transferred out of the UK or the EEA, it is done under the safeguards the law provides for such transfers.
8.How long we keep it
Order records are kept while the account is open, because a business needs its own history. Invoices and financial records are kept as long as the law requires. When an account closes we delete or anonymise what we no longer need.
Registration enquiries from our website are kept until we have followed up and for a reasonable period afterwards, then deleted.
9.Your rights
Depending on where you live, you may ask for a copy of your information, ask us to correct or delete it, object to or restrict how it is used, or ask for it in a portable form. You may also complain to your data protection authority.
If you ordered from a business, start with them — they hold that relationship and we act on their instructions. If they do not respond, write to us at support@trayline.ai and we will act.
10.Children
Trayline is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16.
11.Changes
We will update this policy as the product changes, and the date at the top will say when. If a change materially affects how we handle personal information, we will tell account owners by email.
12.Contact
Privacy questions and data requests: support@trayline.ai.