Privacy Policy
Template text. Adapt to your actual processing before taking customers.
1. What we collect
- Account data — email, name, password hash, restaurant details you enter.
- Order data — items chosen, optional customer name and phone number, the restaurant they ordered from.
- Technical data — IP address (hashed with a server-side salt before storage), user agent, timestamps. Used to prevent abuse.
- Analytics — aggregate page views and menu interactions. No third-party ad tracking.
2. Why we collect it
- to run your account and serve your menu
- to route WhatsApp orders to the correct branch
- to protect the service against spam and bot abuse (via Cloudflare Turnstile and rate-limiting)
- to notify you about service changes and, only if you opt in, product updates
3. Who processes it
We rely on a small set of trusted processors:
- Supabase — database, authentication, and file storage.
- Vercel — hosting and edge delivery.
- Cloudflare — DNS and bot-protection (Turnstile).
- WhatsApp (Meta) — delivery of order notifications when an operator is configured.
We don't sell or rent personal data. We share it only with these processors and only as needed to operate the service.
4. Where it lives
Your data is stored in EU/US regions through our processors above. Transfers to third countries, where they occur, are governed by the processors' standard contractual clauses.
5. How long we keep it
- Account data — until you delete your account, plus a short grace period for backups.
- Order data — 18 months, then anonymized.
- Hashed IPs / event logs — 90 days.
6. Your rights
Under applicable law (including Moroccan Law 09-08 and, where relevant, the GDPR) you can request access, correction, deletion, or export of your personal data. Email privacy@openmenu.co and we'll respond within 30 days.
7. Cookies
We use a small number of cookies: one for your signed-in session, one for language preference, and one issued by Cloudflare Turnstile to verify you aren't a bot. No advertising or cross-site tracking cookies.
8. Changes to this policy
We'll post material changes to this page and note them in the "Last updated" line at the top. Continued use of the service after changes means you accept the updated policy.
9. Contact
Privacy questions: privacy@openmenu.co.