Privacy policy

Who is responsible

MenuGuide, Prague, Czech Republic, is the controller of the data described here. Contact us through menuguide.ai/contact.

What we keep

• Account data: your name, e-mail address, a hash of your password, your sign-in sessions and your language.
• Venue and menu data: what you enter or upload, such as the venue name and address, opening hours, dishes, prices, photos, allergens and translations.
• Billing data: your plan, its status and the Stripe customer reference. Card details go straight to Stripe; we never see them.
• Contact form messages: your name, e-mail, venue and message.
• Guest statistics without cookies: when a guest opens a menu we record events such as a menu view, the language, the currency, a QR scan or an opened dish. Instead of an IP address or device id we store a code that changes every day and can’t be traced back to a person.
• Website statistics the same way: page views and clicks on sign-up and demo links, with the same daily code. When you create an account we also store the page you first arrived on and the link or campaign that brought you (from the mg_src cookie, see the cookie policy).
• Technical logs: IP addresses and request data in server logs and rate limits, kept for a short time for security.

Why

• To run the service you signed up for (the contract with you).
• To bill paid plans and keep invoices (a legal obligation).
• To keep the service secure and show owners how their menu is used (our legitimate interest).
• To answer your messages.

Who processes data for us

• OpenRouter and the AI model providers it routes to (such as Google): the menu photos, PDFs, texts and website content you import, and photos you choose to enhance, are sent to AI models to be read, translated and improved. We send the menu content the task needs, not your account details.
• Stripe: payments and invoices.
• Our e-mail provider: sign-up, sign-in and password e-mails.
• Our hosting provider: the servers run in the European Union.

What is public

A menu you publish is public on purpose: on your guest page, in the machine-readable formats (for search engines and AI assistants), in the MenuGuide app and on your website if you embed it. Unpublished drafts and previews are not listed and not indexed.

How long

• Account, venue and menu data: while you have an account, and deleted within 30 days after you close it.
• Invoices: as long as accounting law requires (in the Czech Republic, up to 10 years).
• Guest statistics: up to 2 years, the longest history any plan shows.
• Contact messages: up to 2 years after the last message.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to move it to another service or to stop a processing you object to. Write to us through the contact form.

You can also complain to the Czech data protection authority (Úřad pro ochranu osobních údajů, uoou.gov.cz).

Changes

When this policy changes, we publish the new version here with its date and e-mail account holders about important changes.