This Privacy Policy describes how MenuBase ("we," "us," or "our") collects, uses, and shares your personal information when you use our website and services.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, company name, phone number, billing address
- Restaurant Information: Branch details, menu items, pricing, descriptions, images
- Payment Information: Credit card details (processed by our payment processor)
- Communication Data: Messages, support requests, feedback
1.2 Anonymous Usage Data
- Aggregated Analytics: We collect anonymous, aggregated usage data to improve our services
- No Personal Tracking: We do not track individual users across websites or use third-party tracking cookies
- Device Information: Anonymous device type, browser type, and operating system information
- Performance Data: Anonymous performance metrics and error reports
2. How We Use Your Information
- To Provide Our Services: Manage your restaurant menus, process translations, generate QR codes
- To Improve Our Services: Analyze anonymous usage patterns to develop new features and fix bugs
- To Communicate With You: Send service updates, respond to support requests, send marketing communications (with consent)
- For Security: Detect and prevent fraud, unauthorized access, and other security issues
- For Legal Compliance: Comply with legal obligations, enforce our terms
3. How We Share Your Information
We only share your information in the following circumstances:
- With Service Providers: Payment processors and hosting providers (with strict data protection agreements)
- For Legal Reasons: To comply with laws, respond to legal requests, protect our rights
- With Your Consent: When you explicitly agree to share your information
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Never With Advertisers: We do not sell or share your data with advertisers or data brokers
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (SSL/TLS) and at rest
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Secure data center facilities with 24/7 monitoring
- Regular security training for our staff
- Anonymous analytics that cannot be traced back to individuals
5. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions where applicable
- Other legally compliant transfer mechanisms
6. Data Retention
We retain your personal information only for as long as necessary:
- Active Accounts: For the duration of your account plus 30 days after cancellation
- Inactive Accounts: 12 months of inactivity before deletion
- Financial Records: 7 years for tax and accounting purposes
- Support Requests: 3 years from resolution
- Anonymous Data: Aggregated anonymous data may be kept indefinitely for statistical purposes
7. Your Rights
Depending on your location, you may have the following rights:
Access & Portability
Request a copy of your data in a machine-readable format
Correction
Update or correct inaccurate information
Deletion
Request deletion of your personal information
Restriction & Objection
Restrict or object to certain processing
To exercise these rights, please contact us at privacy@menubase.net.
8. Our Privacy Principles
Privacy by Design
We build privacy protections into our services from the ground up
Anonymous Analytics
We use anonymous, aggregated data that cannot identify individuals
No Third-Party Tracking
We do not use third-party cookies, tracking pixels, or advertising networks
Data Minimization
We only collect data necessary to provide our services
9. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our website.
11. Contact Us
This Privacy Policy is effective as of February 26, 2026.
For previous versions, please contact our Data Protection Officer.