Privacy Policy
Last updated: 2026
1. Introduction
Restaurant Menu SaaS ("we", "us", "our") operates a digital menu platform for restaurants. This Privacy Policy explains how we collect, use, and protect information.
2. Information We Collect
Restaurant Owners
- Name and email address (provided during onboarding)
- Restaurant name, description, address, and contact details
- Uploaded images and menu content
- Dashboard usage and audit logs
Menu Visitors (Your Customers)
- Anonymous session identifiers (randomly generated, not tied to your identity)
- Hashed IP addresses (we never store your raw IP address long-term)
- Coarse browser and device type (e.g. "Mobile Safari")
- Referrer URL and language preference
- Page views, QR scans, and link clicks
- Search queries (anonymous)
Contact Form Submissions
When you submit the contact form, we collect your name, email, phone, and message. We use this information only to respond to your inquiry.
3. How We Use Your Information
- To operate and display restaurant menu pages
- To provide analytics to restaurant owners about their menu performance
- To respond to contact form inquiries
- To detect abuse and protect against spam
- To maintain audit logs for security and compliance
4. Analytics Collection
We collect basic, anonymous analytics when you view a restaurant menu. We do not use third-party analytics services (like Google Analytics) on menu pages. Analytics data is:
- Stored securely in our database
- Only accessible to the restaurant owner (for their own restaurant) and platform administrators
- Never sold to third parties
- Raw events retained for 12 months; daily rollups retained indefinitely
5. IP Address Handling
We do not store raw IP addresses in long-term analytics or leads data. IP addresses are hashed (one-way encrypted) before storage. Audit log IP addresses are anonymized after 24 months.
6. Cookies and Local Storage
We use cookies and localStorage only for essential functionality (authentication sessions and language preference). We do not use advertising or tracking cookies. See our Cookie Policy for details.
7. Data Retention
- Restaurant and menu data: retained while your account is active
- Analytics events: 12 months
- Daily analytics rollups: indefinitely
- Audit log IP/user-agent: 24 months, then anonymized
- Contact form submissions: retained until you request deletion
8. Your Rights
You may request:
- A copy of your data (restaurant owners can export via CSV in the dashboard)
- Deletion of your personal data
- Correction of inaccurate information
To make a request, contact us.
9. Children
The Service is not directed at children under 13. We do not knowingly collect data from children.
10. Changes
We may update this Privacy Policy. We will notify restaurant owners of material changes via the dashboard or email.
11. Contact
Privacy questions? Contact us.