Privacy Policy

1. Introduction

Welcome to MenuIQ. We ("we," "our," or "us") are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered restaurant and store portal service.

By using the MenuIQ service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service. References to "we," "us," or "our" refer to the operator of the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Email address (used for authentication and communication)
Password (stored securely using industry-standard hashing)
Name (optional, for personalization)

2.2 Business Information

When you set up your restaurant or store, we collect:

Business name and slug
Logo and brand colors
Contact information (phone, email, address)
Business hours
Custom domain information (if applicable)
AI assistant customization settings

2.3 Menu and Product Information

We store the menu items and products you create, including:

Item names, descriptions, and prices
Product images
Categories and tags
Size and customization options
Stock levels (for stores)
Subscription information

2.4 Customer Order Information

When customers place orders through your portal, we collect:

Customer name, email, and phone number
Delivery or shipping address (when applicable)
Order details (items, quantities, customizations)
Pickup time preferences
Special instructions or notes
Payment information (processed securely through Stripe)

2.5 Chat and Conversation Data

When customers interact with the AI chat interface, we collect:

Conversation history and messages
Cart contents and preferences

2.6 Subscription Information

For subscription-based products, we collect:

Subscription status and billing dates
Customer subscription preferences

2.7 Technical Information

We automatically collect certain technical information, including:

IP address and browser type
Device information
Usage patterns and analytics
Session data and authentication tokens

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To provide, maintain, and improve our platform and services
Order Processing: To process and fulfill customer orders
Payment Processing: To facilitate secure payment transactions through Stripe
Communication: To send order notifications, updates, and important service information via email
AI Services: To power the AI chat interface and provide menu recommendations
Account Management: To manage your account, authenticate users, and provide customer support
Business Operations: To manage subscriptions, track inventory, and analyze business performance
Legal Compliance: To comply with legal obligations and protect our rights
Data Retention: Orders are retained for 90 days by default before soft deletion, as configured in your settings

4. Third-Party Services

We use the following third-party services that may collect or process your information:

4.1 Payment Processing

Stripe: We use Stripe Connect for payment processing. Payment information is handled directly by Stripe and is subject to Stripe's Privacy Policy. We do not store full credit card numbers or sensitive payment data.

4.2 AI and Chat Services

OpenAI: We use OpenAI's API to power our AI chat interface. Conversation data may be processed by OpenAI in accordance with their Privacy Policy.

Ragie: We use Ragie for retrieval-augmented generation (RAG) to enhance menu search and recommendations. Menu data is stored in Ragie collections for this purpose.

4.3 Communication Services

Resend: We use Resend for sending transactional emails, including order confirmations and notifications.

4.4 Storage and Hosting

Vercel Blob: We use Vercel Blob for storing uploaded images (logos, menu item images, category images).

Neon Database: Your data is stored in a PostgreSQL database hosted by Neon, a third-party database service provider.

4.5 Authentication

NextAuth: We use NextAuth.js for secure authentication and session management.

5. Data Security

We implement industry-standard security measures to protect your information:

Passwords are hashed using bcrypt before storage
All data transmission is encrypted using HTTPS/TLS
Authentication tokens are securely managed
Access to data is restricted to authorized personnel only
Regular security assessments and updates
Payment information is never stored on our servers (handled by Stripe)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: With third-party service providers (listed in Section 4) who assist in operating our platform
Legal Requirements: When required by law, court order, or government regulation
Business Transfers: In connection with a merger, acquisition, or sale of assets
Protection of Rights: To protect our rights, property, or safety, or that of our users
With Your Consent: When you explicitly authorize us to share your information

7. Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request access to your personal data
Correction: Update or correct inaccurate information through your account settings
Deletion: Request deletion of your account and associated data
Data Portability: Request a copy of your data in a portable format
Opt-Out: Unsubscribe from marketing communications (transactional emails may still be sent)
Notification Preferences: Control email notification settings in your dashboard

To exercise these rights, please contact us at support@menuiq.app.

8. Cookies and Tracking

We use session cookies and authentication tokens to maintain your login state and provide a seamless experience. These are essential for the platform to function properly. We do not use third-party advertising cookies or tracking pixels.

You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of our platform.

9. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

Account information is retained while your account is active
Orders are retained for 90 days by default (configurable in your settings) before soft deletion
We may retain certain information longer if required by law or for legitimate business purposes
Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law

10. Children's Privacy

Our service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your information to these countries.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

Your continued use of our service after any changes to this Privacy Policy constitutes acceptance of those changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@menuiq.app