Privacy Policy

Last updated: April 20, 2025

1. Introduction

This Privacy Policy describes how MenuTap ("we," "our," or "us") collects, uses, and shares your personal information when you use our website (menutap.biz) and services. Your privacy is important to us, and we are committed to protecting your personal information.

2. Information We Collect

2.1. Information You Provide

Account Information: Email address, password, and restaurant name when you create an account
Menu Content: Menu items, descriptions, prices, and images you upload
Language Preferences: Source language of your menu and target languages for translation
Payment Information: Credit card or other payment details processed by our payment provider (Stripe)
Communication: Information you provide when contacting us

2.2. Automatically Collected Information

Device Information: Browser type, operating system, and device identifiers
Usage Data: How you interact with our website, features you use, and pages you visit
IP Address: Used to determine approximate location and for security purposes
Cookies and Similar Technologies: Small data files stored on your device (see our Cookie Notice for details)

3. How We Use Your Information

We use your information to:

Create and manage your account
Provide our translation and menu hosting services
Process payments and manage subscriptions
Personalize your experience (such as remembering your language preferences)
Send service-related communications and updates
Improve and optimize our services
Analyze usage patterns and trends
Ensure security and prevent fraud
Comply with legal obligations

4. Legal Bases for Processing (EU/EEA Users)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

Performance of Contract: Processing necessary to provide you with our services
Legitimate Interests: Processing that serves our legitimate business interests, such as improving our services and marketing
Consent: Processing based on your specific consent, which you can withdraw at any time
Legal Obligation: Processing to comply with our legal obligations

5. Information Sharing

We do not sell your personal information. We may share your information with:

5.1. Service Providers

Supabase: For authentication and database services
Stripe: For payment processing
Google Analytics: For website analytics
Microsoft Clarity: For user experience analytics
Hosting and Infrastructure Providers: To deliver our services

5.2. Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities.

5.3. Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, misuse, or alteration. However, no internet transmission is completely secure, and we cannot guarantee the security of information transmitted to our website.

7. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

Account Information: Retained while your account is active and for a period afterward to comply with legal obligations
Menu Content: Retained while your subscription is active and for up to 30 days after termination
Payment Information: Retained as required for financial and tax purposes (typically 7 years)
Analytics Data: Retained in an anonymized form for up to 26 months

8. Your Rights (EU/EEA Users)

If you are in the European Economic Area (EEA), you have the following rights regarding your personal data:

Access: Right to request access to your personal data
Rectification: Right to request correction of inaccurate data
Erasure: Right to request deletion of your data in certain circumstances
Restriction: Right to request restriction of processing
Data Portability: Right to receive your data in a structured, commonly used format
Objection: Right to object to processing based on legitimate interests
Withdrawal of Consent: Right to withdraw consent at any time

To exercise these rights, please contact us at contact@menutap.biz.

9. International Data Transfers

We primarily process data in the European Union. However, some of our service providers may process data outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

EU Standard Contractual Clauses
Adequacy decisions by the European Commission
Service providers that participate in certified frameworks for international transfers

10. Cookies

We use cookies and similar technologies to:

Maintain your session and authentication status
Remember your preferences (such as language selection)
Analyze website usage and improve our services
Enable certain features and functionality

For detailed information about the cookies we use, please see our Cookie Notice.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect information from children under 16. If you believe we have collected information from a child under 16, please contact us at contact@menutap.biz.

12. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of our services after such modifications constitutes your acknowledgment of the modified Privacy Policy.

14. Data Protection Officer and Contact Information

For privacy-related questions or to exercise your rights:

Email: contact@menutap.biz

If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.