Privacy Policy
Last update:
This Privacy Policy explains how Layout, Inc. ("Layout," "we," "us") collects, uses, shares, and protects personal data.
It covers every way you can use Layout, including our iOS app, our web app, text message ordering, our API and connectors, and access through third-party AI assistants. It applies both to End Users who place orders and to Integrators who build on Layout.
By using Layout, you agree to this Policy.
Who We Are
Layout, Inc. provides software that lets AI assistants and other applications place real orders and complete purchases at participating merchants. Layout is organized in Roseville, California.
Contact us at legal@layout.link.
Use of Generative AI and What We Send to Google
Layout uses generative AI to understand what you ask for and to build your order. Responses provided to you are generated using Google Gemini, a service operated by Google LLC.
What we send to Google
- The messages you send in a Layout chat
- Your first name, so the assistant can address you
- Your delivery or pickup address, when it is needed to find the nearest location for your order
- Details of your recent orders, such as the items and options you chose, so the assistant can make better suggestions
- On text message and connector surfaces only, the last four digits of a saved card, so the assistant can ask which card you want to use
What we never send to Google
- Your phone number
- Your full card number, expiration date, or security code
- Any payment credential of any kind
How Google handles it
We use the paid Google Gemini API. Google acts as a service provider to Layout and processes this data to return a response to you. Under the paid API, Google does not use your prompts or responses to train its models. Google's handling of data is also governed by its own privacy policy, available at https://policies.google.com/privacy.
Your permission
Before your first message is processed, we ask you to agree to this sharing. You can stop at any time by no longer using the chat.
Information We Collect
Account information. Your name, email address, and phone number.
Order and transaction information. The items you order, the merchant, the location, the timing, and the status of the order.
Chat content. The messages you send and the responses you receive. We save these by default so you can return to past chats.
Precise location. With your permission, the app collects precise location so we can find nearby merchants and pick the best location for your order. You can turn this off at any time in your device settings. Turning it off may make it harder for us to find the right merchant location.
Payment information. When you add a card, it goes directly into Stripe's PCI compliant vault and stays there. Layout does not store or log your full card number. We hold only a reference to your Stripe profile and, in some cases, the last four digits of the card so you can tell your cards apart.
Integrator information. For Integrators, account, authentication, and billing information.
Technical and usage information. Logs, device and connection information, and how the Software is accessed.
How We Use Information
We use personal data to:
- Provide and operate Layout
- Understand your requests using generative AI, as described above
- Build and complete orders and purchases on your behalf
- Find nearby merchant locations
- Fund and settle transactions
- Save your chat history so you can return to it
- Learn your preferences from past orders so we can make better suggestions in the future
- Send transactional messages such as order confirmations and pickup updates by text or email
- Secure Layout and prevent fraud
- Provide support
- Meet legal obligations
- Improve and maintain Layout
Chat History and Your Controls
We save your chats by default so you can view them later.
Hiding your chats. In Settings, you can turn off chat history in your view. This hides past chats in the app. Your chats are still retained on our systems until you clear them, as described below.
Clearing your chats. You can clear your chat history at any time in Settings, on both the iOS app and the web app. Cleared chats are held for 30 days for security, audit, and dispute purposes, and are then permanently deleted.
Deleting your account. You can delete your account at any time. Your account is held for 30 days, during which you can restore access by emailing support@layout.link. After 30 days, your account is permanently deleted from our systems.
Payments
Card details you enter go directly to Stripe and are stored in Stripe's PCI DSS Level 1 compliant vault. Your card is never entered into an AI model, never sent to a merchant website by our ordering software, and never stored in plain form by Layout.
When you place an order, Layout funds the purchase and charges the card on file for the order total plus any applicable Layout fee.
How We Share Information
We share personal data only as needed to operate Layout.
Merchants. We share the information needed to place and fulfill your order, such as your name, order details, and pickup or delivery information.
Service providers. We use providers who process data on our behalf under contract, and who are required to protect it to the same standard we do:
- Google LLC for generative AI processing, as described above
- Google Places for merchant and location lookup
- Amazon Web Services for hosting and database infrastructure
- Cloudflare and Vercel for network delivery and web hosting
- Auth0 for sign-in and account authentication
- Stripe for payment processing and card storage
- Basis Theory for tokenizing the merchant loyalty credentials you choose to connect
- Twilio for transactional text messages
- Resend for transactional email
- Browserbase and Browser Use for the cloud browsers that complete your order at a merchant. Payment credentials you add are never provided to them.
- Uber Direct for courier delivery, when you choose delivery
- Intercom for our help center and support conversations
Third-party AI platforms. If you access Layout through an assistant such as ChatGPT, Claude, or Gemini, that platform is independent of Layout and operates under its own terms and privacy policy.
Legal. We may disclose information where required by law, or to protect our rights, our users, or the security of Layout.
We do not sell your personal data, and we do not share it for advertising or cross-context behavioral advertising purposes.
Analytics
We use analytics to understand how Layout is used and to improve it. Our analytics are not tied to individual user identities and are used in aggregated or de-identified form.
Transactional Messages
We may send you text messages or emails about the status of your orders, such as confirmations and pickup or preparation updates. These are tied to your use of Layout. We do not currently send marketing or promotional messages.
Sponsored Placement
In the future, participating merchants may pay to have their listings appear more prominently in search or browsing results. Any such arrangement is paid by the merchant and does not involve selling your personal data. Sponsored placement is bypassed for Layout One members.
Data Retention
We keep personal data for as long as needed to provide Layout, complete and support orders, comply with legal obligations, resolve disputes, and enforce our agreements. Cleared chats and deleted accounts follow the 30 day periods described above. Limited data may remain in routine backups for a short period. When data is no longer needed, we delete or de-identify it.
Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest where appropriate, access controls, and payment infrastructure that is PCI DSS Level 1 compliant. No system is completely secure, and we cannot guarantee absolute security.
Your Rights
Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal data, and to object to or restrict certain processing.
California residents have rights under the CCPA, including the right to know, the right to delete, the right to correct, and the right not to be discriminated against for exercising these rights. We do not sell or share personal data, so there is no sale to opt out of.
To exercise any right, contact us at legal@layout.link. Where Layout processes data on an Integrator's behalf, we will direct your request to that Integrator where appropriate.
International Users
We process and store personal data using infrastructure located in the United States. If you access Layout from outside the United States, your information may be transferred to and processed in the United States. Where required, we rely on appropriate transfer mechanisms, including the Standard Contractual Clauses.
Age Requirement
Layout is intended for users who are at least 18 years old. Because Layout authorizes real purchases and payments, it is not directed to children, and we do not knowingly collect personal data from anyone under 18. If we learn that we have collected such data, we will delete it.
Changes to This Policy
We may update this Policy from time to time. Continued use of Layout after an update becomes effective constitutes acceptance of the revised Policy.
Contact Us
Layout, Inc.
legal@layout.link