Legal
Privacy Policy
Effective August 21, 2026
1. Who this applies to
This policy covers MenuClick ("we," "us"), the QR-menu platform at menuclick.app, and everyone who uses it: restaurant owners and their team members with an account ("you," "account holders"), and the diners who scan a QR code to view a public menu ("visitors").
2. What we collect
| From account holders | Why |
|---|---|
| Name and email address | Sign-in, account identification, team invites, service emails |
| Business name, address, phone, logo, menu content | To build and publish your menu — this is content you enter yourself |
| Menu photos you upload for AI scanning | Turning a physical menu into a draft digital one |
| IP address, browser/device info, page-view events | Security, abuse prevention, understanding product usage |
| Payment details (if you ever purchase extra AI credits) | Billing — handled entirely by our payment processor (Stripe, Lemon Squeezy, or Polar), we never see or store your card number |
From menu visitors (the people scanning your QR code): nothing, by default. The public menu page doesn't ask visitors for a name, email, phone number, or any account — it's just a page they read. If ordering or reservations are ever added as a feature, this policy will be updated before that data is collected, and you'll see it here first.
3. AI menu scanning
When you use the "scan menu with AI" feature, the photo you upload is sent to MiniMax, a third-party AI vision provider, solely to extract categories, items, prices, and descriptions into an editable draft. Nothing from a scan is added to your live menu until you review and confirm it. We don't use your menu photos to train our own models, and we don't share them with anyone other than MiniMax for this one purpose.
4. Who we share data with
We keep this list short and name names, rather than hiding behind "trusted partners":
- MiniMax — processes menu photos you submit for AI scanning (see above).
- Stripe, Lemon Squeezy, or Polar — one of these processes payment, if and when you purchase additional AI credits (final choice not yet made). We never receive or store your full card number.
- Our email delivery infrastructure — used to send account, invite, and service emails (password resets, team invites, receipts).
Everything else — accounts and sign-in, your menu data, uploaded photos, and product-usage analytics — runs on servers we operate ourselves. We do not sell personal data to anyone, for any reason.
5. Cookies
We use one essential session cookie to keep you signed in — it's required for the product to function and isn't used for advertising or cross-site tracking. We also run privacy-respecting, self-hosted product analytics (page views, feature usage) to understand how MenuClick is used; this only identifies you once you're signed in, not anonymous visitors to the public menu pages or the marketing site.
6. How long we keep data
We keep your account and menu data for as long as your account is active. If you delete your account, we delete your personal data and menu content within 30 days, except where we're required to keep records longer (for example, payment records, for tax and accounting purposes).
7. Your rights
You can access, correct, export, or delete your account data at any time from your account settings, or by contacting us. If you're in the EU/EEA, UK, or a jurisdiction with similar data-protection law, you have the rights those laws provide (access, rectification, erasure, portability, objection) — reach out and we'll act on your request.
8. Children
MenuClick is a business tool for restaurants and their staff. It isn't directed at children, and we don't knowingly collect data from anyone under 16.
9. Changes to this policy
If we make a material change to this policy, we'll update the date at the top and, for significant changes, let account holders know directly.
10. Contact
Questions about this policy or your data: privacy@menuclick.app.