LinePilot is food-safety software for commercial kitchens, operated by Leigh Amor LLC. This policy explains what we collect, why, and what we will never do with it.
We collect what the product needs to work: who runs the kitchen, who to alert, and what the temperature was. We do not sell personal information, and we never share mobile numbers or SMS consent with anyone for marketing. Staff can stop text alerts at any time by replying STOP.
LinePilot is a product of Leigh Amor LLC, a Washington limited liability company. When a restaurant subscribes to LinePilot, that business is our customer. Its employees use the product, and this policy covers them too.
For most information in LinePilot, the subscribing business decides what is collected and why; we process it on their behalf.
| Information | Why we have it |
|---|---|
| Business name, address, contact details | To identify the account and provide support |
| Staff names and roles | To record who performed a safety check and to set permissions |
| Mobile numbers and mobile carrier | To send food-safety alerts by text |
| Email addresses | Sign-in, password resets, reports and alert fallback |
| Sign-in credentials | Passwords are stored hashed, never in readable form |
| Temperature readings and sensor data | The core record the product exists to keep |
| Safety check logs and timestamps | Compliance history, and to know when a check is overdue |
| Photos taken for verification | Evidence attached to a check, where a kitchen uses that feature |
| Sign-in records and device activity | Security, and diagnosing problems |
Payments are handled by Stripe. Card numbers go directly to Stripe and are never stored on our systems.
We will not share or sell your mobile information with third parties for promotional or marketing purposes. Mobile numbers and SMS consent are never shared with any third party for marketing, and are never sold. The only parties that receive your number are the messaging providers required to deliver the message to your handset.
This section matters most to the people receiving alerts, so it is stated plainly.
The subscribing business enters staff mobile numbers during setup, and confirms it has each person's permission to send operational alerts to that number. Consent is obtained by the employer as part of onboarding. We do not buy, rent, or otherwise acquire phone numbers.
Only operational, transactional messages: a refrigeration unit outside safe temperature range, an overdue safety check, or a similar condition requiring action. We do not send marketing or promotional texts.
Reply STOP to any message and that number is removed from alerts immediately. Reply START to resume, or HELP for assistance. Message and data rates may apply. Message frequency varies with kitchen conditions — most locations receive only a handful per month.
Mobile numbers and SMS consent are never shared with third parties or affiliates for marketing purposes. They are shared only with the messaging provider that physically delivers the text, and only for that delivery.
We use a small number of service providers to run the product. Each receives only what it needs:
We also disclose information where the law requires it, or to protect someone's safety. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Compliance records are the point of the product, so temperature and safety-check history is retained for as long as the account is active — health inspections often look back months. Accounts closed for more than 90 days are deleted, along with their staff records, unless we are required to keep something longer.
A number removed by replying STOP is suppressed permanently, so that it is not re-added by mistake.
Data travels over encrypted connections. Passwords are hashed. Access to production data is limited to people who need it to operate the service, and sign-ins to administrative tools require a second factor.
No system is perfect. If a breach affects your information, we will tell you and the relevant authorities as the law requires.
Depending on where you live you may have additional rights, including under the Washington My Health My Data Act or the California Consumer Privacy Act. Write to us and we will honour them.
LinePilot is a workplace tool and is not directed at children. We do not knowingly collect information from anyone under 16.
If we change this policy materially we will update the date above and notify account administrators. Continuing to use LinePilot after a change means accepting the revised policy.
Leigh Amor LLC
info@leighamor.com
leighamor.com/linepilot