Menelier

Menelier Privacy Policy

Effective date: 1 September 2026
Version: 2026-09-01-professional-legal-review

1. Controller

The controller of personal data processed through Menelier is:

2. What Menelier does

Menelier is an online service for restaurants and hospitality businesses. It helps customers create menus, manage menu documents, use AI-assisted menu tools, generate exports and publish QR menu pages.

This Privacy Policy explains how we process personal data when you visit our website, register, use the application, pay for a plan or credit pack, contact support, or interact with public menu pages.

3. Personal data we process

We may process the following categories of personal data:

We do not intentionally ask you to provide sensitive personal data. Please do not submit health data, national identifiers, payment card numbers outside Stripe checkout, or other sensitive information unless we specifically request it and it is necessary.

We process personal data for these purposes:

Purpose Examples Legal basis
Account creation and login registration, email verification, password security, workspace access contract performance or steps before contract
Providing Menelier menu editing, exports, QR pages, templates, team access, saved settings contract performance
Payments and billing subscriptions, invoices, tax handling, failed-payment handling, credit purchases contract performance and legal obligation
AI-assisted features processing prompts, menu files, design context, generated suggestions contract performance; where needed, legitimate interest in providing requested functionality
Security and abuse prevention rate limits, fraud prevention, duplicate-credit prevention, logs, device signals legitimate interest in protecting the service and users
Support responding to questions, diagnosing bugs, handling complaints contract performance and legitimate interest
Legal compliance accounting, tax, dispute handling, regulatory requests legal obligation and legitimate interest
Service improvement aggregated usage analysis, reliability monitoring, product improvement legitimate interest, or consent where cookies or tracking require it
Marketing communication newsletters or promotional emails consent; or, for existing customers, legitimate interest only where applicable electronic-marketing law permits customer communications for our own similar services and a simple opt-out is provided

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that happened before withdrawal.

How we obtain personal data

We obtain personal data directly from you when you register, use Menelier, submit content, make a purchase or contact us; from a workspace administrator or another user who invites you; from payment and service providers when they return transaction, delivery or security information; and automatically from the service, browser or device when technically necessary or, for optional analytics, after the required consent.

If you choose “Continue with Google”, Google authenticates you and returns a signed identity assertion containing a stable subject identifier, your email address, your profile display name where supplied, and your email-verification status. Menelier uses the name only as an editable registration suggestion. Menelier does not receive your Google password, does not request access to Gmail or Google Drive through this sign-in flow, and does not retain the Google access token or ID token after authentication.

Required data and consequences of not providing it

Account credentials and the information needed to create and secure an account are required to provide registered Menelier features. Billing and tax information shown as required at checkout is needed to process a paid purchase and meet applicable accounting or tax obligations. If required data is not provided, we may be unable to create the account, conclude or perform the requested contract, or process the purchase.

Automated decision-making

Menelier does not currently make decisions based solely on automated processing that produce legal effects or similarly significant effects for users. Payment, fraud-prevention or security providers may apply their own automated checks under their respective privacy notices; Menelier does not control those providers’ independent processing.

5. Payments

Payments are processed by Stripe or another provider shown during checkout. Menelier does not store full payment card details. Depending on the processing activity and applicable Stripe service, Stripe may process payment details, billing address, tax information and transaction metadata as Menelier’s processor and/or for Stripe’s own purposes as an independent controller, including payment-network, fraud-prevention and legal-compliance activities, under Stripe’s applicable terms and privacy notice.

We store only the billing and transaction information needed to manage your subscription, orders, credits, invoices, accounting, tax and support.

6. AI providers

If you use AI-assisted features, the content you provide for that feature may be sent to an AI provider such as OpenAI or another provider configured for Menelier.

When the OpenAI API is used, OpenAI states that API input and output are not used to train its models unless Menelier explicitly opts in. Under OpenAI's default controls, abuse-monitoring logs containing prompts and outputs may be retained for up to 30 days, subject to legal or safety exceptions or different approved retention controls.

This may include menu text, uploaded menu files, images, restaurant context, design instructions and generated output. You should not submit confidential, sensitive or third-party personal data unless you have the right to do so and it is necessary for the feature.

AI outputs should be reviewed before use. Menelier may store AI usage records, credit reservations, credit consumption, error logs and generated outputs needed to provide the feature, prevent abuse and support the account.

6a. API and customer-selected integrations

When a workspace owner or administrator configures an API connection or outgoing webhook, Menelier processes the connection name, token prefix and one-way token hash, selected permissions, endpoint URL and events, encrypted webhook signing secret, creation and last-use timestamps, rate-limit records, short-lived API idempotency request fingerprints and cached JSON responses, and webhook delivery status, response code and error metadata. The readable API token and signing secret are shown only once; Menelier does not retain a readable copy of the API token.

At the customer’s instruction, Menelier may transmit the restaurant or menu data permitted by the token or selected webhook events to a service chosen by the customer, such as the customer’s own Make account, POS system or server. That connected service processes the received data under its own terms and privacy notice. A customer-selected service does not become a Menelier subprocessor merely because the customer connects it; the customer is responsible for having an appropriate legal basis, contract and transfer safeguards for that recipient.

Active token and endpoint metadata is retained until it is revoked or deleted, or until the workspace is deleted, subject to security and legal retention needs. API idempotency records normally expire after 24 hours, and webhook event and delivery history is normally removed after 30 days. A plan downgrade preserves credentials and endpoint settings in suspended form so the customer can revoke or delete them, but pending deliveries are not replayed after reactivation. These server-to-server integrations do not set additional browser cookies.

6b. Customer-connected cloud storage

If you connect Google Drive or Dropbox, Menelier receives an OAuth access token and, where issued, a refresh token, together with the connected account and destination-folder identifiers. The credentials are encrypted at rest and are used only to perform storage actions you request, including an automatic rule you enable to save a finished PDF or PNG export after publishing or exporting.

For Google Drive, Menelier requests the drive.file permission. This limits access to files and folders that Menelier creates or that you explicitly open or select for use with Menelier; Menelier does not scan or access unrelated content in your Drive. Menelier uses Google user data only to provide this cloud-storage feature and does not sell it, use it for advertising or use it to train AI models. Its use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect the provider at any time. Disconnecting revokes Menelier's connection, removes the stored OAuth tokens and deactivates the connection settings, subject to limited security and legal records. Files already stored in your Google Drive or Dropbox remain under your control and are not deleted automatically; you can delete them in the connected service. The provider processes account and file data under its own terms and privacy notice.

6c. Customer-connected Instagram publishing

If you choose to connect an Instagram professional account, Meta authenticates the account and returns its numeric identifier, username, account type, granted permissions and an OAuth access token. Menelier encrypts the token at rest and uses it only to verify the connection, refresh authorised access and perform the Instagram actions you request.

When you request publication, Menelier sends the selected menu images and the caption you enter to Meta Platforms Ireland Limited so that Meta can create a public post on the connected Instagram account. Menelier requests only instagram_business_basic and instagram_business_content_publish. It does not request access to Instagram messages, comments, contacts, followers or unrelated account management functions, and it does not use Instagram data for advertising or AI training.

You can disconnect Instagram at any time. Disconnecting removes the stored OAuth credentials and marks the connection as revoked. Completed integration-job history, including the selected export, status and provider media identifier, is normally retained for 90 days for reliability, duplicate-publication prevention and support. Posts already published to Instagram remain there until you delete them on Instagram. You can also request deletion of associated Menelier data as described in section 12.

7. Cookies and similar technologies

We use cookies and similar technologies for technical operation, security, login, preferences and, where enabled, analytics or marketing.

Technical cookies necessary for the website or application can be used without consent. Non-essential analytics or marketing cookies are used only where legally permitted and, where required, after consent.

More details are provided in the Menelier Cookie Policy. Google Analytics 4 is used on the public website and in Menelier Atelier only after the visitor or signed-in user accepts analytics cookies on the relevant hostname. Analytics remains disabled before consent and after rejection.

Consented Atelier measurement can include page paths without URL query strings, registration and login completion, checkout starts and confirmed purchases. Purchase events include an internal order number, currency, amount and the purchased plan or credit-pack type. Menelier does not send names, email addresses, account identifiers, payment-card details, menu content or verification and reset tokens to Google Analytics.

8. Public menu pages

If you publish a QR menu or public menu page, the published content can be accessed by anyone with the link or QR code. Published content may include restaurant contact details, images, descriptions and other information you choose to publish.

You are responsible for ensuring that published content is lawful and does not contain personal data you are not allowed to publish.

9. Who receives personal data

We may share personal data with:

10. International transfers

Some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as an adequacy decision, Standard Contractual Clauses, provider data-processing terms, or other legally permitted transfer mechanisms.

Menelier's primary application hosting and encrypted backup storage are in the Czech Republic. Brevo states that its database hosting is within the European Union. Stripe, OpenAI, Google and Meta may use affiliates or subprocessors in the United States or other countries; restricted transfers are covered by the safeguards identified in their applicable data-processing terms, including Google measurement data-protection terms where relevant.

11. Retention

We keep personal data only for as long as needed for the purposes described above, unless a longer period is required by law.

Indicative retention periods:

12. Your rights

Subject to legal conditions, you may have the right to:

In the Czech Republic, the supervisory authority is the Office for Personal Data Protection: https://uoou.gov.cz.

To exercise your rights, contact us at info@menelier.com. We may need to verify your identity before acting on a request.

13. Business customer data and processor role

For account data, billing data, security logs and direct relationship data, we usually act as controller.

For content that a business customer uploads or publishes through Menelier and that contains personal data of its own staff, suppliers, guests or other individuals, the business customer may be the controller and Menelier may act as processor. In that case, the Menelier Data Processing Addendum applies as part of the customer agreement.

14. Security

We use technical and organisational measures designed to protect personal data, including access control, password hashing, CSRF protection, signed payment webhooks, rate limits, private storage areas, HTTPS in production and restricted administrative access.

No online service is completely risk-free. You are responsible for keeping your login details secure and for limiting access to trusted team members.

15. Children

Menelier is not intended for children. We do not knowingly provide the service to children or collect children’s personal data.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If changes materially affect how we process personal data, we will provide reasonable notice through the website, application or email.

17. Contact

Privacy questions can be sent to:

info@menelier.com