Privacy Policy
This Privacy Policy explains how Menu.ceo collects, uses, and protects information when you use our AI-Agent-Ready restaurant menu platform.
Last updated: February 28, 2026
1. Information We Collect
Menu.ceo ("we," "us," or "our") collects information you provide directly and information collected automatically when you use menu.ceo and mn.ink links.
Information you provide:
- Account information such as name, email, password, and business name
- Restaurant profile details including address, hours, and contact data
- Menu content such as items, prices, descriptions, categories, and images
- FAQ and review content that you publish through the Service
- Reservation settings and customer communication templates
- Billing details and payment method information via our payment providers
- Support messages and other communications you send to us
Information collected automatically:
- Device and technical data including IP address, browser type, and operating system
- Usage analytics such as pages viewed, clicks, session duration, and feature usage
- AI Assistant interaction logs used to answer customer questions and improve response quality
- Cookies and similar technologies as described in our Cookie Policy
2. How We Use Information
We use information to operate and improve the Service, including to:
- Provide menu hosting, short links, and QR menu experiences
- Power AI-Agent-Ready content for menu, FAQ, and review pages
- Run the built-in AI Assistant and reservation workflows
- Process subscriptions, billing, and account administration
- Provide analytics dashboards and service performance insights
- Send transactional communications related to security and billing
- Provide customer support and troubleshoot issues
- Detect abuse, fraud, and security incidents
- Comply with legal obligations
4. Data Security
We use technical and organizational safeguards to protect your data, including encryption in transit, access controls, and routine security monitoring.
No system is fully secure. While we work to protect your information, we cannot guarantee absolute security.
5. Data Retention
We keep information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
When your account is deleted, we remove or anonymize personal data within a reasonable period unless we must keep specific records for legal or security reasons.
6. Your Rights and Choices
You can request to access, correct, export, or delete your data.
You can also opt out of non-essential marketing messages at any time.
Depending on your location, you may have additional rights under laws such as GDPR or CCPA/CPRA.
7. International Data Transfers
Your information may be processed in countries where we or our service providers operate. When required, we use appropriate safeguards for cross-border data transfers.
8. Children Privacy
The Service is intended for business users and is not directed to children under 18. We do not knowingly collect personal information from children.
9. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our Service or legal requirements. We will post updates on this page with a revised last updated date.