Privacy Policy

Menusify (“we”, “us”, or “our”) operates the website menusify.com and the Menusify service (collectively, the “Service”).

1. Information We Collect

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve the Menusify Service (menu compliance checking, AI description generation, modifier recommendations, image pre-checks, export functionality).
• To authenticate your account and personalize your experience.
• To communicate with you about your account, updates, support requests, and service announcements.
• To detect, prevent, and address technical issues, fraud, abuse, or violations of our Terms of Service.
• To generate aggregated, anonymized insights about menu trends (never linked to identifiable individuals).
• To comply with legal obligations (e.g., responding to valid subpoenas or court orders).

3. How We Share Your Information

We do not sell your personal information. We share information only in these limited cases:

• Service Providers: Stripe (payments), Google Cloud / Gemini API (AI processing), Umami (analytics), Vercel (hosting) — all under strict data processing agreements.
• Legal Requirements: If required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with merger, acquisition, or sale of assets (with notice where required).
• With Your Consent: For any other purpose with your explicit permission.

4. Data Storage & Transfers

Your data is primarily stored in secure data centers in Singapore and/or the United States (depending on Vercel & Google Cloud region selection). When you use Gemini API, some menu text and image data may be processed on Google servers (subject to Google's Data Processing Addendum and safeguards).

We use appropriate safeguards (Standard Contractual Clauses, adequacy decisions, etc.) for any cross-border transfers.

5. Data Retention

• Account data: retained while your account is active + 12 months after deletion (for legal & backup purposes).
• Menu data: retained only as long as needed to provide the Service or until you delete it (whichever comes first).
• Logs & analytics: retained up to 14 months (Umami default anonymization period).

6. Your Rights & Choices

Depending on your location, you may have the following rights:

• Access, correct, or delete your personal data.
• Object to or restrict certain processing.
• Data portability (in machine-readable format).
• Withdraw consent (where processing is consent-based).
• Lodge a complaint with your local data protection authority.

7. Security & Children's Privacy

We implement commercially reasonable technical, administrative, and physical safeguards to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure.

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such data, we will delete it.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or prominent notice on the Service. Continued use after changes constitutes acceptance.