Octi from Honeydew Labs LLC
Privacy policy
Last updated November 5, 2026
This policy explains how Honeydew Labs LLC handles information when you use Octi online ordering and its related account and support features.
Information we collect
We process the phone number and verification information used to sign in, your name, cart and order contents, item notes, fulfillment choices, delivery address and instructions, payment method and payment status, and any addresses you choose to save. Our hosting and security providers also process technical information such as IP address, device and browser information, request times, and error or abuse signals. Do not put payment card numbers or other unnecessary sensitive information in item notes, addresses, or support messages.
How we use information
We use information to build and recover your cart, verify your phone, price and submit your order, support pickup or delivery, show receipts and history, maintain your account, respond to support requests, and prevent fraud and service failures. A restaurant receives the information it needs to fulfill and support your order. If you choose an assisted ordering channel, your messages and order instructions are also processed to understand and confirm that request.
Service providers and restaurants
We use Google Firebase for authentication, hosting, storage, and related security services, and Google Maps services to find and validate delivery addresses and locations. Communications providers and carriers process messages when a texting feature is used. Providers receive information needed to perform these services. The restaurant may retain its own order records and use other fulfillment systems under its own policies; contact it about those practices. We may also disclose information when required by law or needed to protect rights, safety, or the security of the service.
Browser storage and shared devices
Octi uses browser storage to retain your sign-in and recover ordering progress when you return. Saved progress is still subject to order and session expiry. Clearing site data or using private browsing can prevent recovery. On a shared device, sign out when finished. Receipt links reveal an order summary to anyone who has the link; personal delivery details and notes require the appropriate signed-in account. Keep receipt links private.
Analytics and public-page recordings
Where analytics is available, analytics and eligible public-page interaction recordings start automatically in the background on public home and menu pages. You can turn collection off at any time in Privacy choices; ordering works either way. We preserve previous refusals and honor your browser’s Global Privacy Control or Do Not Track preference. We use PostHog US Cloud to understand visits, coarse campaign sources, ordering interactions, completed-order outcomes, repeat visits by the same browser, and sanitized browser error categories and code locations. A separate browser identifier expires after 90 days and is kept separate for each restaurant in analytics. We do not send your name, phone number, delivery address, item notes, sign-in credentials, or payment details to PostHog. Eligible public home and menu interactions may be recorded, including public text, menu items, images, and layout. Input values are hidden. Cart, checkout, account, address, saved-order, recovery, and receipt surfaces are excluded. We limit analytics events to approximately three calendar months and recordings to 30 days, with provider cleanup timing applying. Turning collection off stops new collection on this browser immediately. Once your choice reaches our server, it cancels queued events; a transmission already in progress may finish. It does not erase information already sent. Contact us for a privacy request. Basic aggregate visit and ordering counts continue separately, without this persistent browser identifier or recordings. Ordering, security and abuse-prevention information described elsewhere in this policy continues as needed to provide the service.
Payments
The payment method and status appear at checkout and on your receipt. For pay-at-restaurant or pay-on-delivery orders, Octi does not collect a payment card number through this ordering flow. Any payment you make directly to a restaurant is handled under its payment arrangements. Do not send card details in a text, item note, or support request.
Communications and advertising
Requesting a verification code causes a sign-in text to be sent to the supplied number. We use contact information for service and order support. Providing a number for verification does not opt you into marketing. We do not sell personal information or share it for cross-context behavioral advertising in this ordering service. Mobile numbers and messaging consent are not shared with third parties for their own marketing. Service providers and carriers may process them to deliver the messages you request.
Retention and account deletion
Complete customer receipts and order history details are available through Octi for 60 days; older history may retain a summary. This display limit is not a promise that all stored order information is deleted after 60 days. We retain records as needed for order fulfillment, recovery, security, disputes, accounting, and legal obligations. You can remove saved addresses and request account deletion from Profile. Account deletion removes your profile information and sign-in account; it does not automatically erase restaurant order records or information that must remain for those purposes.
Your choices and privacy requests
You can review your profile, edit saved details, and manage saved addresses while signed in. Contact us to request access, correction, deletion, or a copy of your information, or to ask about a privacy decision. Depending on where you live and which laws apply, you may have additional rights, including an appeal or the ability to use an authorized agent. We may ask for information needed to verify the request and authority to act, and will explain applicable limitations. You may also contact the relevant privacy regulator. We do not discriminate against you for exercising applicable privacy rights.
Security and children
We use access controls and other safeguards designed to protect information, but no system can guarantee absolute security. Do not share verification codes, and tell us if you suspect unauthorized account access. Octi is not directed to children under 13. Contact us if you believe a child has provided personal information so we can investigate and take appropriate action.
Changes to this policy
We update this policy when our practices change and revise the date above. We will provide additional notice or obtain consent for material changes when required. Contact Honeydew Labs LLC with questions about this policy or Octi’s handling of your information.
Contact Honeydew Labs LLC at help@menutime.app.
Back to menu