Privacy Policy

Last updated: February 26, 2026

This Privacy Policy describes how MenuBase ("we," "us," or "our") collects, uses, and shares your personal information when you use our website and services.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, company name, phone number, billing address
  • Restaurant Information: Branch details, menu items, pricing, descriptions, images
  • Payment Information: Credit card details (processed by our payment processor)
  • Communication Data: Messages, support requests, feedback

1.2 Anonymous Usage Data

  • Aggregated Analytics: We collect anonymous, aggregated usage data to improve our services
  • No Personal Tracking: We do not track individual users across websites or use third-party tracking cookies
  • Device Information: Anonymous device type, browser type, and operating system information
  • Performance Data: Anonymous performance metrics and error reports

2. How We Use Your Information

  • To Provide Our Services: Manage your restaurant menus, process translations, generate QR codes
  • To Improve Our Services: Analyze anonymous usage patterns to develop new features and fix bugs
  • To Communicate With You: Send service updates, respond to support requests, send marketing communications (with consent)
  • For Security: Detect and prevent fraud, unauthorized access, and other security issues
  • For Legal Compliance: Comply with legal obligations, enforce our terms

3. How We Share Your Information

We only share your information in the following circumstances:

  • With Service Providers: Payment processors and hosting providers (with strict data protection agreements)
  • For Legal Reasons: To comply with laws, respond to legal requests, protect our rights
  • With Your Consent: When you explicitly agree to share your information
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Never With Advertisers: We do not sell or share your data with advertisers or data brokers

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (SSL/TLS) and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication mechanisms
  • Secure data center facilities with 24/7 monitoring
  • Regular security training for our staff
  • Anonymous analytics that cannot be traced back to individuals

5. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions where applicable
  • Other legally compliant transfer mechanisms

6. Data Retention

We retain your personal information only for as long as necessary:

  • Active Accounts: For the duration of your account plus 30 days after cancellation
  • Inactive Accounts: 12 months of inactivity before deletion
  • Financial Records: 7 years for tax and accounting purposes
  • Support Requests: 3 years from resolution
  • Anonymous Data: Aggregated anonymous data may be kept indefinitely for statistical purposes

7. Your Rights

Depending on your location, you may have the following rights:

Access & Portability

Request a copy of your data in a machine-readable format

Correction

Update or correct inaccurate information

Deletion

Request deletion of your personal information

Restriction & Objection

Restrict or object to certain processing

To exercise these rights, please contact us at privacy@menubase.net.

8. Our Privacy Principles

Privacy by Design

We build privacy protections into our services from the ground up

Anonymous Analytics

We use anonymous, aggregated data that cannot identify individuals

No Third-Party Tracking

We do not use third-party cookies, tracking pixels, or advertising networks

Data Minimization

We only collect data necessary to provide our services

9. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our website.

11. Contact Us

Data Protection Officer:

Email: privacy@menubase.net

This Privacy Policy is effective as of February 26, 2026.

For previous versions, please contact our Data Protection Officer.

Related Documents