Introduction
MenuOnScan ("we", "us", "our") operates menuonscan.app and related services for restaurant operators. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you use our platform as an account holder, team member, or guest viewer. This is a production-ready draft — final wording requires review by qualified legal counsel before launch in regulated markets.
Who we are
MenuOnScan is the data controller for marketing-site visitors and platform account data. Restaurant operators are typically controllers for guest feedback and menu content they publish; we act as a processor for that venue data under our Terms and available DPA.
Information we collect
Account data: name, email, venue details, team membership, billing identifiers (processed by Stripe when enabled). Menu content: items, prices, images, allergens, hours, branding. Usage data: login events, dashboard actions, scan analytics (aggregated), device/session metadata. Guest feedback: optional ratings, comments, table numbers. Payment data: handled by Stripe — we do not store full card numbers.
How we use information
We use data to provide and improve the service, authenticate users, deliver transactional email, process payments, prevent abuse, comply with law, and respond to support requests. We do not sell personal information. Marketing email requires consent where required by law.
Legal bases (EEA/UK)
Contract performance (providing the subscribed service), legitimate interests (security, product improvement, aggregated analytics), legal obligation, and consent where applicable (non-essential cookies, optional marketing).
International transfers
Data may be processed outside your country. For EEA/UK transfers we rely on Standard Contractual Clauses or equivalent mechanisms where required. Contact us for a copy of applicable safeguards.
Retention
We retain account data while your subscription is active and for a limited period afterward for billing, legal, and backup purposes. You may export data or schedule account deletion in Settings (7-day grace period). Guest feedback is retained until the venue or account is deleted.
Your rights
Depending on jurisdiction you may access, correct, delete, restrict, port, or object to processing. EU/UK residents: see /gdpr. California residents: we do not sell personal information; contact us for applicable CCPA/CPRA requests.
Children
MenuOnScan is a business service not directed at children under 16. We do not knowingly collect children's personal data.
Security
We apply technical and organizational measures described on /security. No method of transmission is 100% secure.
Changes
We may update this policy. Material changes will be posted here with an updated date and, where required, notified to account owners.
Contact
Privacy inquiries: hello@menuonscan.app. Data Protection contact for EU requests: hello@menuonscan.app (subject: Privacy).