Privacy Policy

1. Information We Collect

• Account Information: Name, email, password, restaurant name, business details.
• Phone Number: We collect your phone number for account verification and authentication via SMS one-time passwords (OTP).
• Menu Content: Items, prices, images, offers, descriptions.
• Usage Data: Device info, browser type, pages visited, actions taken.
• Payment Data: Processed securely by third-party providers (e.g., Stripe). We do not store card details.
• Connected payment accounts: If you connect your Stripe account, we store its Stripe account ID, name and currency, and the status of the payments made for your orders. We never receive your Stripe password. A payment provider key you paste is stored encrypted.

2. How We Use Your Information

We use information to:

• Provide and improve our digital menu services
• Authenticate accounts and verify user identity via SMS OTP verification
• Send one-time passwords (OTP) to your phone number for login and order verification
• Communicate updates, support replies, or billing notices
• Generate QR menus and configuration data
• Prevent fraud and ensure platform security
• Comply with legal obligations

3. SMS Verification

We use Firebase Authentication, a service provided by Google, to verify your phone number via SMS one-time passwords (OTP). When you provide your phone number for verification:

• An SMS containing a verification code is sent to your phone number
• Your phone number is shared with Google/Firebase solely for the purpose of sending the verification SMS
• Standard SMS rates from your carrier may apply
• Your phone number is stored securely and used only for authentication and order-related communication

By using our SMS verification service, you consent to receiving automated SMS messages for authentication purposes. Message frequency varies. You can opt out by not using phone-based login.

Google's privacy policy applies to the Firebase Authentication service: https://policies.google.com/privacy

4. Sharing of Personal Data

We ONLY share data with:

• Google/Firebase for phone number verification and authentication
• Payment processors (e.g., Stripe) for billing
• Your own payment provider (e.g., Stripe), to create and confirm the payments for your orders, including the customer’s email when they give one at checkout
• Hosting providers (for storing menu data)
• Analytics tools for improving performance

We do NOT sell personal information.

5. Data Security

We use encryption, secure authentication, and third-party compliant services to protect your data. Phone numbers are stored securely and transmitted over encrypted connections. However, no system is 100% secure.

6. Data Retention

We retain user data, including phone numbers, as long as the account is active or as required for legal, accounting, and operational purposes. You may request deletion of your data at any time.

When you set up a store by chatting with Zao, our assistant, on our website, we save that conversation, including the store name, email address and phone number you type, even if you stop before your account is created. We use it to help you finish setting up and to improve the setup. A conversation that does not become an account is deleted 90 days after its last message. Passwords you type are never saved in it.

7. Your Rights

Depending on your location, you may have the right to:

• Access your data
• Update or correct your data
• Request deletion of your account and associated data
• Request export of your data
• Opt out of marketing emails and SMS communications

8. Children's Privacy

Menuthere is not intended for individuals under 18. We do not knowingly collect data from children under 18.

9. International Data Transfers

Your data may be transferred and processed outside your country through secure and compliant service providers, including Google/Firebase services.

10. Facebook Messenger and Instagram Messages

Restaurants can connect their Instagram professional account and Facebook Page to Menuthere, so that customers who message them, or comment on their Instagram posts, automatically receive a link to order. When a restaurant connects, we receive and store the Instagram account's ID and username, the Page's name and ID, an access token (stored encrypted), and the restaurant's reply settings.

When a customer messages or comments, Meta sends us that event so we can reply. We do not store the text of messages or comments. We keep only the customer's Facebook- or Instagram-scoped ID and when we last sent them the ordering link, so they don't receive it repeatedly. We use this data only to send that reply; we never sell it or use it for advertising.

To delete this data, disconnect Facebook & Instagram in your dashboard, remove "Menuthere Orders" in your Instagram settings or "Menuthere Social" in your Facebook settings, or email us. Step-by-step instructions: menuthere.com/data-deletion.

11. Updates to Policy

We may update this policy when needed. Changes will appear on this page with an updated "Last Updated" date.

Questions? Contact help@mail.menuthere.com