Privacy Policy

Your data privacy is our priority. Learn how menuffy collects, uses, and protects your information to provide you with the best restaurant management and digital menu experience.

Last updated:
Read time:~12 min

Contents

Introduction

menuffy ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website, mobile application, and related services (collectively, the "Service").

menuffy is a premium digital menu platform designed for restaurants and food service businesses. Our Service provides QR menu access, 3D dish previews, AR experiences, analytics, and comprehensive menu management tools for restaurant owners and their customers.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. By accessing or using menuffy, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

Information We Collect

We collect information from various sources to provide, improve, and personalize our Service. The information we collect depends on how you interact with menuffy—whether you are a restaurant owner, menu manager, or customer viewing a restaurant's digital menu.

Personal Information

  • • Account credentials (name, email address, phone number, password)
  • • Business details (business name, business registration information)
  • • Profile information (profile photo, bio, business description)
  • • Contact information and communication preferences
  • • Payment and billing information (credit card, bank account details)
  • • Communication history (support tickets, emails, chat messages)
  • • Device information (device type, operating system, unique identifiers)

Business Information

  • • Business type and industry classification
  • • Business location and geographic data
  • • Operating hours and service type information
  • • Tax identification and compliance information
  • • Subscription plan and service tier details
  • • License and certification information

Restaurant Information

  • • Menu items and dish descriptions
  • • Food images and photos (user-uploaded content)
  • • Pricing information and menu structure
  • • Dietary information and allergen data
  • • 3D models and asset files
  • • Category organization and menu hierarchy
  • • Special notes, preparation details, and customization options

Analytics Data

  • • QR code scan counts and timestamps
  • • Menu item views and engagement metrics
  • • Customer device types and operating systems
  • • Geographic location data (country, city level)
  • • Session duration and browsing behavior
  • • 3D model interaction data
  • • Cart actions and abandonment metrics
  • • Customer segment and demographic estimates
  • • Click patterns and navigation flow

Payment Information

  • • Credit card numbers (tokenized and encrypted)
  • • Billing address and payment method
  • • Transaction history and invoice records
  • • Subscription renewal dates and payment status
  • • Refund and adjustment records

Note: Payment information is processed by our third-party payment processor and is not stored on our servers in unencrypted form.

Cookies & Tracking Technologies

menuffy uses cookies and similar tracking technologies to enhance user experience, analyze how our Service is used, and personalize content. These technologies help us understand user preferences and improve our Service's performance.

Cookies

Essential Cookies: Required for core functionality, including session authentication and security features.
Performance Cookies: Help us understand how users interact with menuffy, including page load times and error rates.
Functional Cookies: Remember user preferences such as language settings and dashboard customizations.
Marketing Cookies: Used to deliver personalized content and measure marketing campaign effectiveness.

Other Tracking Technologies

  • Pixels and Web Beacons: Tiny graphics used to track user behavior across pages
  • Local Storage: Browser-based data storage for preferences and session information
  • Server Logs: IP addresses, browser type, and access times for security and analytics
  • Analytics Tools: Third-party services that track user behavior and platform performance
Cookie Consent: When you first visit menuffy, we request your consent to use non-essential cookies. You can adjust your preferences at any time through your account settings.

How We Use Your Data

menuffy uses the information collected for various purposes essential to providing, improving, and securing our Service:

Service Provision

Create and manage accounts, process subscriptions, and deliver menu management features

Analytics & Insights

Generate usage reports, performance metrics, and customer behavior analytics for restaurant owners

Communication

Send service notifications, billing information, security alerts, and customer support responses

Personalization

Customize user experience based on preferences, device type, and usage patterns

Security

Prevent fraud, ensure platform security, and protect against unauthorized access

Service Improvement

Analyze user behavior to enhance features, fix bugs, and optimize platform performance

Legal Compliance

Fulfill legal obligations, comply with regulations, and enforce terms of service

Marketing

Create targeted content, measure campaign performance, and send promotional materials (with consent)

Third-Party Services

menuffy integrates with trusted third-party services to deliver complete functionality. We share necessary information with these partners under strict data processing agreements:

Payment Processors

Stripe, PayPal - Process subscription payments and refunds

Cloud Storage

AWS, Google Cloud - Store images, 3D models, and application data

Analytics Providers

Google Analytics, Mixpanel - Track platform usage and performance

Email Services

SendGrid, AWS SES - Deliver transactional and marketing emails

CRM Platform

HubSpot - Manage customer relationships and support inquiries

3D Model Processing

Triposer.ai, Vertex AI - Convert images into 3D models

AR Framework

WebAR, WebGL libraries - Enable AR experiences on supported devices

CDN Services

Cloudflare - Optimize content delivery globally

Your Control: We do not sell your personal data to third parties for their marketing purposes. Any data sharing is limited to service provision and is governed by Data Processing Agreements requiring GDPR and CCPA compliance.

Data Retention

menuffy retains your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. Retention periods vary based on data type and use case:

Account Data:Retained while account is active. Deleted within 30 days of account termination.
Menu & Restaurant Data:Retained during subscription. Can be exported or deleted upon request within 30 days.
Analytics Data:Aggregated data retained for 24 months. Individual session data deleted after 90 days.
Transaction Records:Retained for 7 years for tax and legal compliance purposes.
Support Communications:Retained for 2 years after final communication.

Data Security

menuffy implements industry-standard security measures to protect your information from unauthorized access, alteration, and destruction. Our security practices include:

End-to-End Encryption:HTTPS/TLS encryption for all data in transit
Database Encryption:AES-256 encryption for sensitive data at rest
Access Controls:Role-based access control (RBAC) limiting data access to authorized personnel
Multi-Factor Authentication:MFA available for account protection
Regular Audits:Third-party security audits and penetration testing
Incident Response:Documented procedures for security breach response and notification
Backup Systems:Regular encrypted backups stored in geographically distributed locations
Security Training:Staff training on data protection and security best practices

No Guarantee: While we implement robust security measures, no system is completely secure. menuffy cannot guarantee absolute security and is not liable for unauthorized access resulting from factors beyond our reasonable control.

International Data Transfers

menuffy operates globally and may transfer, store, and process your information in countries other than your country of residence. These countries may have data protection laws different from your home country.

When we transfer personal data internationally, we implement appropriate safeguards:

  • ✓ Standard Contractual Clauses (SCCs) for EU/UK transfers
  • ✓ Data Processing Agreements ensuring adequate protection
  • ✓ Privacy Shield Frameworks where applicable (deprecated but noted)
  • ✓ Your explicit consent for international transfers when required

By using menuffy, you consent to the transfer of your information to countries outside your country of residence, which may include countries that do not have the same data protection laws as your country.

Your Rights

menuffy respects your privacy rights. Depending on your location, you may have specific rights regarding your personal information:

GDPR Rights (EU/UK/EEA Users)

Right of Access: Request a copy of your personal data we hold.
Right to Rectification: Correct inaccurate or incomplete information.
Right to Erasure: Request deletion of your data ("Right to be Forgotten").
Right to Restrict Processing: Limit how we use your data.
Right to Data Portability: Receive your data in structured, portable format.
Right to Object: Opt-out of marketing and certain processing activities.

CCPA Rights (California Residents)

Right to Know: Request what personal information we collect, use, and share.
Right to Delete: Request deletion of personal information (with exceptions).
Right to Opt-Out: Opt-out of personal information sales or sharing.
Right to Correction: Request correction of inaccurate personal information.
Right to Limit Use: Limit use and disclosure of sensitive personal information.

How to Exercise Your Rights

  1. Log in to your menuffy account and access Privacy Settings
  2. Submit a formal data request through our Privacy Portal
  3. Email your request to privacy@menuар.com with verification documents
  4. Contact our Data Protection Officer for complex requests

Response time: We will respond to verified requests within 30 days (or as required by applicable law).

Children's Privacy

menuffy Service is not directed to individuals under 13 years old (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.

If we become aware that a child under 13 has provided us with personal information, we will take immediate steps to delete such information and terminate the child's account. Parents or guardians who believe their child has provided information to menuffy should contact us immediately.

For users aged 13-18 (minors), we provide enhanced privacy protections and limited data processing. Parental consent may be required for certain features depending on local regulations.

Contact Us

If you have questions about this Privacy Policy, concerns about our data practices, or wish to exercise your privacy rights, please contact us:

menuffy Privacy Team

privacy@menuffy.com
+1 (555) 123-4567
menuffy Legal Department
New Delhi, India

Data Protection Officer

dpo@menuffy.com
(For GDPR-related inquiries only)

Response time: We will respond to all privacy inquiries within 14 business days.

Changes to This Policy

menuffy may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • • Update the "Last Updated" date at the top of this page
  • • Send email notification to registered account holders
  • • Display a prominent notice on the menuffy homepage
  • • Request your explicit consent for certain changes

Your continued use of menuffy after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.