Privacy Policy

Last updated: 19 October 2026

Who is responsible

AIOLI is run by Arsalan Korkchi, Avenida Litoral 3, 29689 Estepona (Málaga), Spain.

1. What AIOLI is

AIOLI is software for restaurants. When a restaurant connects its accounts, AIOLI answers the calls it misses, replies to messages (for example on Instagram, WhatsApp and the restaurant's website), takes bookings, answers reviews, and publishes posts and ads that the restaurant has approved. It also keeps the restaurant's Google Business Profile and Instagram details up to date. Some of this work is done by artificial intelligence.

This policy explains what personal data we handle, why, and what rights you have. It applies to the website getaioli.ai and to the AIOLI app and services.

2. Our two roles

Restaurants that use AIOLI

For the owners and staff of restaurants that sign up, we are the controller of their account data. That means we decide how it is used, under this policy.

Guests of those restaurants

When a guest calls, writes to or books with a restaurant that uses AIOLI, the restaurant is the controller and we act as its processor (Article 28 GDPR). We handle guest data only on the restaurant's instructions and only to provide AIOLI to that restaurant. If you are a guest, the restaurant's own privacy notice applies too, and you can contact the restaurant or us to use your rights.

3. What data we handle

Account data: name, email, phone number, the restaurant's name, address and opening hours, login details, and billing details.
Data from accounts a restaurant connects:
- Instagram (Meta): the professional account's profile (name, username, profile picture), its posts and comments, and the messages people send to it, with the sender's username and profile name.
- Google Business Profile: the business listing (name, address, hours, photos, posts) and its reviews, with the reviewer's public name.
- WhatsApp and phone: the phone number someone uses to message or call the restaurant, the content of the message, and for calls, the call audio and a written transcript.
Booking and guest data: name, phone number, email, booking date, time and party size, notes, and visit history. Guests sometimes share allergies or dietary needs. We only keep that if the guest tells the restaurant, and we use it only to prepare their booking.
Photos and content: photos and text that the restaurant uploads or connects, and the ads and posts AIOLI makes from them.
Technical data: basic logs, such as IP address, device and time, kept to run AIOLI securely.

4. Why we use it, and on what legal basis

To provide AIOLI to a restaurant: answering, booking, marketing and reporting. Basis: our contract with the restaurant (Article 6(1)(b) GDPR). For guest data, we act on the restaurant's instructions and the restaurant's legal basis.
To keep AIOLI safe and working, and to prevent abuse. Basis: our legitimate interests (Article 6(1)(f)).
To meet legal duties such as tax and accounting. Basis: legal obligation (Article 6(1)(c)).
To reply to you when you write to hello@getaioli.ai. Basis: your request, and our legitimate interests.

We do not sell personal data. We do not use guests' data to build advertising profiles, and we do not use it to train AI models.

5. Artificial intelligence

AIOLI uses AI models to understand and answer calls and messages, to write replies and posts, and to create images for ads. Anyone talking or writing to AIOLI is told that they are dealing with an AI. They can ask to speak to the restaurant's team at any time. The restaurant can always see, change or stop what AIOLI does for it.

6. Who we share data with

We share data only with service providers that help us run AIOLI. We have contracts with each of them that protect the data. They fall into these groups:

Hosting and storage (for example Cloudflare).
AI providers, for speech, language and image models.
Telephone and messaging providers, which carry calls, text messages and WhatsApp messages.
Payments (for example Stripe), for restaurants' billing.
Meta and Google, when a restaurant connects its accounts. We send them only what is needed to publish, reply or update on the restaurant's behalf.

We may also share data when the law requires it. Ask us at hello@getaioli.ai for the current list of providers.

7. Transfers outside the EU

Some providers handle data outside the European Economic Area. When they do, the transfer is protected by the European Commission's Standard Contractual Clauses, by the EU–US Data Privacy Framework, or by another safeguard the GDPR allows.

8. How long we keep data

Account data: while the restaurant uses AIOLI. After that, only what tax and accounting law requires.
Call audio: up to 30 days. Transcripts, messages and booking history: while the restaurant uses AIOLI.
When a restaurant leaves AIOLI or disconnects an account, we delete the data from that account within 30 days, unless the law requires us to keep it.
Technical logs: up to 30 days.

9. Data from Meta (Instagram)

We use data from Instagram only to provide AIOLI's features to the restaurant that connected that account: reading and answering its messages and comments, publishing what it approves, and showing it its own results. We do not sell this data, and we do not pass it to data brokers or ad networks. When a restaurant removes AIOLI from its Instagram settings, or asks us to delete its data, we delete the data we received from that account. See Data deletion.

10. Data from Google

AIOLI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Business Profile data only to show, update and reply on the connected business's own listing, at that business's request.

11. Your rights

You can ask us for access to your data, and to correct it, delete it, restrict it, or receive it in a portable form. You can also object to how we use it. Write to hello@getaioli.ai. We answer within one month.

If you are a restaurant's guest, you can also ask the restaurant. If you write to us instead, we pass your request to the restaurant and help it answer.

You also have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).

12. Security

Data is encrypted in transit and at rest. Only the people who need access have it, and logins to connected accounts are stored encrypted. If a data breach ever affects you, we will tell you and the authority as the GDPR requires.

13. Cookies

This website does not use advertising or analytics cookies. The AIOLI app uses only the cookies it needs to keep you signed in.

14. Children

AIOLI is a service for businesses. It is not meant for children.

15. Changes

If we change this policy, we will update the date at the top. If the change matters to how we use your data, we will tell restaurants that use AIOLI before it takes effect.