Privacy policy
Last updated: 3 November 2026
Who is responsible
The operator of Menu Creator is the controller of the personal data described here. Contact: hello@menucreator.example.
What we collect, and why
| Data | Why (legal basis) |
|---|---|
| Account: name, email, password (stored hashed), sign-in details | To run your account (contract) |
| Restaurant details: name, address, phone, logo, menu content and photos you upload | To provide the menu service (contract) |
| Enquiries: name, restaurant name, email or phone, message, photos of menus you send us | To reply to you and prepare your menu (your request, pre-contract) |
| Scan counts: how many times a menu's QR code was opened per day. We don't store who scanned. | To show you usage of your menu (contract) |
| Emails about setting up your account (day 0, 3 and 14), and product tips | Legitimate interest in helping you use the service; you can opt out at any time |
| Payment details (when Pro is available): handled by Stripe. We don't store card numbers. | To take payment (contract) |
| Aggregated, cookieless analytics (only if the operator enables it) | Legitimate interest in understanding page use; no personal profile |
Who processes data for us
- Hosting and storage: our hosting provider runs the application and database; photos and logos are kept in object storage (Cloudflare R2).
- Stripe: payments and the customer portal, when paid plans are on.
- Resend: sends our transactional and onboarding emails.
- Anthropic: AI features (menu photo import, translation, and photo checks) send the content you choose to import to the AI API. We don't send account details to it.
- Plausible (optional): privacy-friendly analytics with no cookies, enabled only where configured.
Where a provider is outside the UK/EEA, we rely on the safeguards the provider offers (such as standard contractual clauses).
How long we keep it
- Account and menu data: while your account is open. When you delete your account, we delete it within 30 days, except what the law requires us to keep (for example, invoices).
- Enquiries and their photos: 12 months after the last contact, then deleted.
- Scan counts: kept with the menu; deleted with it.
- Backups: rolling, deleted within 35 days.
Your rights
You can ask us to access, correct, export or delete your data, to restrict or object to processing, and to withdraw consent. Unsubscribe from onboarding emails with the link at the bottom of any of them. To use any right, email hello@menucreator.example. We reply within one month. You can also complain to your data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).
Diners
Guests who open a menu don't need an account and we don't ask for their details. Our servers log standard request information (such as IP address) for security and debugging, for a short period.
Changes
We'll update this page when our practices change and tell account holders about significant changes.