menulink.live

Privacy Policy

Last updated

menulink.live is operated by Sreeraj T A, an individual based in India ("we", "us"). This policy explains what we collect when restaurants, cafés and other businesses ("owners") use menulink.live, and when their customers ("guests") view a menu or place an order.

In short: guests do not need an account, we do not use advertising or tracking cookies, and menu statistics are anonymous.

What we collect from owners

  • Account details: your name or business name, email address and password (stored only as a secure hash).
  • Business details you add: address, phone, logo, menu, prices, photos, allergens, tax settings, tables and opening information.
  • Orders and sales recorded in your account, and your staff device links.
  • Billing: payments are handled by Dodo Payments, who act as merchant of record. We receive your plan, payment status and the email used, never your full card details.
  • Technical data: your IP address and browser details, used briefly to protect logins and prevent abuse, and in server logs.

What we collect from guests

  • Menu statistics: when a menu is opened and which dishes stay on screen, linked to a random identifier that lasts for one browser visit. We do not use cookies for this and do not identify guests.
  • Orders: the items, sizes and add-ons, notes, and, if the guest gives them, a name for collection or a seat or room number. Guest names are deleted from orders after 30 days.
  • A random identifier stored on the guest's phone, used to limit abuse and to show "Your orders" on that phone. It is not linked to who the guest is.
  • IP address, used briefly to limit abuse. Guests never pay through menulink.live; payment happens directly with the business.

How we use it

  • To run the service: show menus, pass orders to the business, print bills and receipts, and give owners statistics about their own menu.
  • To bill subscriptions and one-off purchases.
  • To keep accounts secure and stop abuse.
  • To reply when you contact us, and to send account emails such as password resets.
  • To improve menulink.live using aggregated, anonymous usage information.

Who processes data for us

We use a small number of service providers, only for the purposes above:

  • Hetzner (Germany): hosting of the service and its database.
  • Cloudflare (United States): domain name system and email forwarding.
  • Dodo Payments: subscription and one-off payments, as merchant of record.
  • DeepSeek: AI processing of menu content, for importing a menu from a photo or PDF, the free menu check, automatic translations and Menu Makeover suggestions. We send menu text and images, not guest data.
  • Resend (United States): sending account emails such as password resets.
  • Let's Encrypt: security certificates for custom domains.

Analytics on our own website

menulink.live and dashboard.menulink.live use a self-hosted copy of Umami, a privacy-friendly analytics tool that does not use cookies or collect personal data. You can stop your own visits being counted by opening menulink.live/?notrack=1.

How long we keep data

  • Account and menu data: for as long as the account exists.
  • Orders: for as long as the account exists, so owners can see their history; guest names are removed after 30 days.
  • Anonymous menu statistics: up to 400 days.
  • Photos uploaded to the free menu check: 24 hours.
  • Server logs: up to 14 days.

Your rights

You can ask to see, correct, export or delete your data by emailing support@menulink.live. Owners can edit most of their data directly in the dashboard. We reply within 30 days.

If you are in the European Union or United Kingdom, you have rights under the GDPR, including the right to complain to your data protection authority. In India, the Digital Personal Data Protection Act, 2023 gives you similar rights.

Guests: menus and orders belong to the business you ordered from. For questions about an order, contact that business first; you can also contact us.

Security

Connections use HTTPS, passwords are hashed, staff links and order links are long random secrets stored only as hashes, and access to production systems is restricted. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

Children

Owner accounts are for adults running a business. Guests of any age can view a menu without giving us personal data.

Changes

We will update this page when our practices change and change the date at the top. Significant changes will be shown in the dashboard.

Contact

Sreeraj T A, India. Email: support@menulink.live.