Privacy Policy

Last updated: March 2026

This Privacy Policy describes how Harbor's Italian Kitchen, through the Milaflow platform operated by Milaflow LLC, collects, uses, and protects your personal information.

Information we collect

When you place an order, we collect your name, phone number, email address (if provided), delivery address (for delivery orders), and order history. If you call the restaurant, calls may be recorded for quality and training purposes. Call recordings are retained for 90 days.

How we use your information

Your information is used to process and deliver your orders, communicate order status, and improve our services. If you opt in to marketing, we may send promotional messages about Harbor's Italian Kitchen specials and offers.

SMS marketing

If you consent to receive promotional messages, you will receive approximately 4 messages per month from Harbor's Italian Kitchen via Milaflow. Message and data rates may apply. You may opt out at any time by replying STOP, or by contacting us at support@milaflow.ai. Consent is not a condition of purchase.

Payment information

Payment processing is handled by Stripe. We do not store your full credit card number. Stripe's privacy policy governs the handling of your payment data.

Data sharing

We do not sell your personal information. We share data only with service providers necessary to operate the platform (Stripe for payments, Twilio for SMS, delivery partners for delivery orders) and with Harbor's Italian Kitchen to fulfill your orders.

Your rights

Under the Texas Data Privacy and Security Act (TDPSA) and the California Consumer Privacy Act (CCPA), you have the right to access, correct, or delete your personal data. You can delete your data right here — we'll verify it's you with a one-time code first:

Request deletion of your personal data. We'll send a one-time code to verify it's you before erasing anything.

You may also contact us at support@milaflow.ai; we will respond within 45 days.

Data retention & what deletion does

When you delete your data, we erase your personal information — your name, phone number, email, saved delivery address, and any call recordings and transcripts. We retain de-identified transaction records (order amounts, items, tax, and dates, with no personal data attached) as permitted for tax and legal compliance; these records can no longer be linked back to you. Payment records are held by Stripe under their retention rules.

Contact

For privacy questions or data requests, contact Milaflow LLC at support@milaflow.ai.