Trust

Your data stays yours.

What happens to your business’s data on Spice-ey: who owns it, how you take it with you, what happens if you leave, and who else handles it. Every line here describes how Spice-ey works today.

Last updated: 14 October 2026

It belongs to your business

Your menu, orders, customer list, stock and reports belong to your business. We use them to run Spice-ey for you, and we don’t sell them.

Your customers are yours. Each business sees only the orders placed with it, and we don’t give your customer list to any other business on Spice-ey.

We don’t train AI models on your data. Our AI provider processes it only to run the feature you asked for, and doesn’t train its models on it either.

Take it with you, any time

On every plan, including Free, you can download from Console as spreadsheet files:

  • your orders, with each customer’s name and phone number;
  • your customer list, with marketing consent and your notes.

Sales and shift reports, payroll and accounting download the same way on the plans that include them.

Anything Console can’t download yet, such as your menu, your recipes or your full accounting history, we export for you. Email hello@spice-ey.com from the owner’s email address.

On Pro and above, your own AI assistants can also read your menu, orders and sales through agent access.

If you cancel or close your account

Cancelling a paid plan deletes nothing. At the end of the period you paid for, your workspace moves to the Free plan and your data stays. A late payment never deletes your data either.

Closing your account is a separate step: open Settings → Delete account in Console, or email us. Download what you need first, or ask us for an export.

Once we confirm the request, your storefront stops taking orders, and within 30 days we delete or de-identify the workspace’s data. We keep only what we must for tax, accounting, fraud-prevention or legal reasons, such as orders, invoices and audit records, and only for as long as required.

Our backups hold the last eight weeks, so copies in them are gone within about two months of deletion.

The details are in the Merchant Agreement, the Privacy Policy and our account-deletion instructions.

Who else handles your data

We use a small number of providers to run Spice-ey. Each one handles only what its job needs.

Railway
Our database and background jobs, in Amsterdam, the Netherlands.
Vercel
Runs our websites and apps, on servers in Frankfurt, Germany.
Cloudflare
Our domain names and email routing, and an off-site copy of our daily backups.
Anthropic
Runs the AI features: menu import, translation, the owner brief and assistant, and draft replies.
Resend
Sends emails, such as order updates and sign-in codes.
Meta
Carries WhatsApp chats when you message us there. Sign-in codes over WhatsApp are switched off for now. Measures our ads on spice-ey.com through the Pixel and Conversions API only after you accept cookies and we configure tracking; the Pixel's first-party cookies are disabled.
Paymob
Takes card payments on its own secure page, for businesses that turn card payments on.
Google
Shows maps and finds addresses for delivery. Analytics and Ads count visits and measure our ads on spice-ey.com only after you accept cookies and we configure tracking.
Sentry
Error reports, with phone numbers, emails and addresses masked, stored in Frankfurt, Germany.
GitHub
Holds our code and runs the daily backup.

How we protect it

Separation between businesses, sign-in, audit records, backups, payments and AI are covered on our security page.