Privacy Policy

Menu.ceo values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit menu.ceo, create an account, use a trial or paid subscription, publish a menu, contact us, or visit a menu hosted through the Service.

Account and contact information

• Name, email address, and login information
• Team-member and account-access information
• Trial, subscription, plan, and billing status
• Support category, subject, message, and related correspondence

Restaurant and menu information

• Restaurant name, address, phone number, hours, and other business details
• Menu images, restaurant photos, logos, item names, descriptions, prices, categories, and other submitted content

Payment information

Stripe processes payment details and transaction information. Menu.ceo does not store full payment-card numbers.

Usage and visitor information

• Pages visited, menu visits, supported interactions, and timestamps
• Referring page, campaign parameters, shared-link source, and attribution channel
• Browser type, operating system, device type, user agent, and approximate region
• IP address and related identifiers used for security, analytics, fraud prevention, and service operation
• Cookies, local storage, and consent choices where used

The Service is intended for business users and is not directed to children under 18. We do not knowingly collect personal information from children.

We use information to:

• Create, authenticate, and administer accounts
• Provide trials, subscriptions, billing, and receipts
• Scan, organize, host, display, and update restaurant menus
• Provide referral, campaign, and visitor-source analytics
• Respond to support requests and service messages
• Secure, troubleshoot, and improve the Service
• Prevent fraud, abuse, and security incidents
• Comply with legal, tax, and regulatory obligations

We may use aggregated or de-identified information for product analysis and improvement when it cannot reasonably be used to identify an individual.

Restaurants can use Menu.ceo to understand how visitors reach and use their hosted menus. Analytics may include pageviews, referral links, campaign parameters, device information, approximate region, and supported menu interactions.

For personal information processed through hosted-menu analytics on behalf of a restaurant customer, the customer generally decides why the information is collected and acts as the controller or business. Menu.ceo generally acts as the processor or service provider, as those terms apply under relevant privacy laws.

Customers are responsible for providing required privacy notices, configuring their use of analytics lawfully, and obtaining consent where required. Our Data Processing Agreementdescribes these responsibilities in more detail.

Menu.ceo does not sell hosted-menu analytics, use it for cross-context behavioral advertising, or use it to profile menu visitors for unrelated purposes.

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information to service providers that help operate Menu.ceo, including:

• Stripe: payment processing and transaction management
• Cloudflare: content delivery, infrastructure, and security
• Anthropic and Google: AI-assisted processing of submitted menu content
• Resend: delivery of support and service messages
• Google Analytics, Ahrefs Web Analytics, and self-hosted OpenPanel: optional measurement of the Menu.ceo marketing website when enabled through consent controls

We may also disclose information when required by law, to protect rights and security, in connection with a business transaction, or when you direct or consent to the disclosure. Providers may process information in the United States or other countries under their applicable safeguards.

We use cookies and similar technologies for essential functions, consent storage, preferences, security, and, when allowed, website analytics. See our Cookie Policy for the current categories and durations.

You can manage optional measurement through our cookie settings and your browser controls. Disabling storage may limit some features.

Browsers may send a "Do Not Track" signal. Because there is no universally accepted standard for these signals, the website does not currently respond to them. Other parties may collect information across websites only through optional third-party measurement services enabled through your consent choices.

We use reasonable technical and organizational measures designed to protect information, including encryption in transit, access controls, authentication safeguards, rate limiting, and abuse-prevention controls.

No transmission or storage system is completely secure. You are responsible for protecting account credentials and promptly reporting suspected unauthorized access.

Depending on where you live and the law that applies, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information. You may also have the right to appeal a privacy decision or restrict certain processing.

California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, delete, correct, opt out of sale or sharing, limit certain use of sensitive personal information, and receive equal service when exercising privacy rights. These rights apply only when the law covers the relevant person, information, and business.

Menu.ceo does not sell personal information or share it for cross-context behavioral advertising. We do not discriminate against anyone for exercising an applicable privacy right.

Submit a request to privacy@menu.ceo. We may verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law, subject to appropriate verification.

We retain information only as long as reasonably necessary for the purposes described in this policy, subject to the Service and plan you use:

• Restaurant analytics history: up to 3 years on Starter and up to 5 years on Growth
• Account, menu, and uploaded content: while needed to provide the account and for a limited period after closure for recovery, security, dispute, or legal needs
• Payment, transaction, and tax records: for the period required by applicable accounting and tax laws
• Support and security records: only as long as reasonably needed to respond, prevent abuse, and maintain service records

You may request deletion at any time. Legal obligations, security needs, active disputes, and backup cycles may delay or limit deletion.

We may update this Privacy Policy from time to time. We will post the revised policy with a new "Last updated" date and, when required, provide additional notice by email or through the Service.

This Privacy Policy is governed by the laws of the State of California, United States, without limiting any privacy rights that apply under another jurisdiction's laws.

Questions about this policy or our privacy practices can be sent to privacy@menu.ceo.