Skip to main content
Security & payments

Phase 1 keeps card data out of our system on purpose

Stripe owns the hosted payment page and the sensitive data. OrderPizza.app owns the order state, payment status, and merchant visibility.

No raw card data in our UI

OrderPizza.app does not collect, display, or store card numbers, CVV, or DTMF digits. Phase 1 uses Stripe-hosted payment links sent over SMS.

Phase 1 payment flow

AI captures the order. OrderPizza.app requests a Stripe payment link. Stripe sends the secure page to the caller's phone. Status updates land in your dashboard.

Future secure phone payments

Secure DTMF or a PCI-compliant provider is in our roadmap. Settings will be disabled until admins enable them per tenant.

Auditable changes

Sensitive admin actions on tenants, payments, and telephony are recorded in an internal audit log with actor and object references.

Bring phone ordering online without changing your number.

Pilot pricing during onboarding. We’ll walk you through the forwarding setup, menu import, and a test call before you go live.