Privacy Policy

What this covers

This policy explains how MenuMint collects and uses information when you create a business page, use the dashboard, or visit a MenuMint page.

Information you provide

When you create an account, we receive your email address and authentication details. When you build a page, we store the business information, menu or service content, links, offers, and images you choose to publish, including uploaded files needed to display that content.

If you use a public page's contact form, MenuMint receives the details you choose to submit: your name, email address, phone number, category, message, and consent. The submission is delivered to the business owner through their Leads inbox so they can reply.

If you request an appointment, we receive the requested service and time, your name, email address or phone number, consent, and any optional note. The business owner receives that booking request through their dashboard; a request is not a confirmation.

Information collected from public pages

We collect limited, privacy-safe usage events such as page views and button actions. A browser creates a random visit ID for the page session; it is kept in runtime memory and sent with the event, not written to local storage or the URL. Our first-party menumint_anon cookie helps the server apply abuse controls and deduplicate anonymous events. It is HttpOnly, has a 30-day maximum age, and is not an account login.

When available, an event also includes coarse country, device category (desktop, mobile, or tablet), an origin-only referrer, and a finite source label such as QR, Google, or WhatsApp. Cloudflare may provide an IP address to the request; the server uses it to derive short-lived, hashed rate-limit and deduplication keys rather than storing the raw IP in analytics records. These signals are used for aggregate reporting and service protection, not to build visitor profiles.

Visitors do not need an account to view a page. We do not sell visitor profiles. Public pages may contain business-selected links to services such as WhatsApp; those services have their own privacy policies when you follow a link.

Personalized pilot demos

For a limited founder-led pilot, MenuMint may prepare a temporary, unofficial business-page demo using factual information that a business has made public on sources such as Google Maps. The demo identifies its source, is excluded from search indexing, and expires after four weeks if it is not claimed.

We record limited operational details such as the public source link, public business contact information, demo views, outreach status, expiry, and claim status. When someone claims a demo, we store the verified account email and copy the demo into that account. A recipient can reply “stop” or contact support@menumint.org to request no further pilot contact or deletion of an unclaimed demo.

How we use information

We use information to authenticate accounts, store and publish the page you configure, deliver contact submissions and booking requests to the selected business, prevent abuse, measure aggregate conversion activity, provide support, send sign-in messages, run an AI feature when a business owner asks for it, and process billing, refunds, or subscription changes when a paid checkout is enabled.

Service providers

We use trusted providers to operate specific parts of MenuMint:

• Cloudflare provides the edge hosting and request handling, D1 database, and R2 file storage used by the service.
• Cloudflare Email Service delivers account emails such as sign-in links, invitations, and business alerts.
• Groq processes relevant business or menu content only when an owner chooses an AI feature that needs it.
• Razorpay and Lemon Squeezy provide payment, checkout, and subscription services for the regions where each gateway is enabled. The payment provider handles payment details; MenuMint receives the provider identifiers, status, amount, and currency needed to operate billing.
• Google Fonts may receive a request from a browser to render MenuMint's selected fonts.

These providers process information under their own terms and may retain records according to their policies and legal obligations.

Retention and deletion

We keep account details, published content, contact submissions, booking requests, and billing records for as long as needed to provide the service and while the account or business relationship remains active. You can update content in the dashboard, delete your account from Settings, or contact support@menumint.org to request correction or deletion.

Account deletion removes the account and its associated application records, and MenuMint attempts to remove uploaded files from its storage. Some records may need to remain with MenuMint or a provider for security, abuse prevention, fraud or dispute handling, accounting, legal obligations, or backup and operational retention. Anonymous aggregate analytics may remain where they are no longer linked to an account or contact.

Your choices

You can update your business content from the dashboard. You can ask questions about your information, request correction, or request deletion at support@menumint.org.

Changes and contact

We may update this policy as the product changes. The effective date above will change when we publish a material revision. For privacy questions, contact support@menumint.org.