1. Information We Collect

We collect information you provide directly when using the Service:

• Account information: Name, email address, and password
• Business information: Business name, menu content, photos, and pricing
• Payment information: Processed securely by our third-party payment provider (we do not store card details)
• Communications: Messages you send to us via contact forms or email

We also automatically collect:

• Usage data: Pages visited, features used, and interaction patterns
• Device information: Browser type, operating system, screen resolution, and device type
• Network data: IP address, approximate location, and referring URLs
• Cookies: Session and preference cookies for authentication and personalization

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process transactions and send billing notifications
• Send service-related communications (account updates, security alerts)
• Provide customer support and respond to inquiries
• Analyze usage patterns and optimize performance
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations

We do not sell your personal information to third parties.

3. Data Storage & Security

Your data is stored securely on cloud infrastructure with industry-standard protections:

• Encryption at rest and in transit (TLS 1.2+)
• Secure authentication with bcrypt password hashing
• Role-based access controls for team members
• Regular security audits and vulnerability assessments
• Globally distributed CDN for menu photos and assets

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

4. Data Sharing

We share your information only in these circumstances:

• Service providers: Hosting, analytics, payment processing, and email delivery partners who help us operate the Service
• Legal requirements: When required by law, court order, or legal process
• Safety: To protect the rights, safety, and property of our users and the public
• With your consent: When you explicitly authorize sharing

Public menus: Menus you create are accessible to anyone with the link or QR code. This is the intended functionality of the Service. Do not include sensitive personal information in your menu content.

5. Cookies & Tracking

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and security. Cannot be disabled.
• Preference cookies: Remember your language, theme, and display preferences.
• Analytics cookies: Help us understand how the Service is used and identify areas for improvement.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features.

6. Your Rights

You have the right to:

• Access: View your personal data through your dashboard
• Correction: Update inaccurate information in your account settings
• Export: Download your data in standard formats
• Deletion: Delete your account and all associated data
• Opt-out: Unsubscribe from marketing communications
• Portability: Receive your data in a machine-readable format
• Complaint: Lodge a complaint with a supervisory authority

To exercise these rights, use your account settings or contact us at hello@menuy.app.

7. Data Retention

• Active accounts: We retain your data for as long as your account is active
• Deleted accounts: Data is retained for 30 days for recovery purposes, then permanently deleted
• Legal requirements: Some data may be retained longer if required by law (e.g., billing records for tax purposes)
• Analytics: Anonymized, aggregated analytics data may be retained indefinitely

8. International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions where applicable.

9. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days in advance. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at hello@menuy.app or visit our contact page.