Privacy Policy

1. Data Controller

The data controller responsible for your personal information is Interatek, operating the MÉNU platform. For any privacy-related inquiries, you may contact us at the details provided at the end of this policy.

2. Information We Collect

Account information: When you register, we collect your name, email address, and password. We also collect company details such as business name, address, and phone number.

Service data: We store the content you create on the platform, including menus, products, branch information, images, and menu configurations.

Payment information: When you subscribe to a paid plan, payment details are collected and processed by Stripe, our payment processor. We do not store your full credit card number on our servers. We receive from Stripe limited information such as the last four digits of your card, card brand, and payment status.

Usage data: We collect information about how you interact with the platform, including pages visited, features used, browser type, device information, and IP address.

3. Legal Basis and Authorization

We process your personal data based on the following legal grounds:

• Contractual necessity: Processing required to provide the service you subscribed to, including account management, billing, and menu hosting.
• Consent: For optional data processing activities, such as marketing communications, we will request your explicit consent. You may withdraw consent at any time.
• Legitimate interest: For platform security, fraud prevention, and service improvement, where our interests do not override your fundamental rights.
• Legal obligation: When required by applicable laws or regulations.

By creating an account and using the platform, you authorize MÉNU by Interatek to collect and process the data described in this policy for the purposes stated herein.

4. How We Use Your Information

• Provide, maintain, and improve the MÉNU platform and its features.
• Process payments and manage your subscription through Stripe.
• Send transactional communications, including billing receipts, subscription alerts, and service notifications.
• Monitor platform usage to improve performance, security, and user experience.
• Enforce our Terms and Conditions and protect against fraud or abuse.
• Comply with legal obligations and respond to lawful requests.

5. Third-Party Service Providers

We share your data with trusted third-party providers who assist us in operating the platform:

• Firebase (Google Cloud): Authentication, database (Firestore), and file storage. Data is processed under Google's data processing terms.
• Stripe: Payment processing, subscription management, and invoice generation. Stripe processes payment data under its own privacy policy.
• Vercel: Platform hosting and content delivery. Vercel processes request data under its privacy policy.

We do not sell your personal information to third parties.

6. Data Storage and Security

Your data is stored on servers managed by Google Cloud (Firebase) and is protected by industry-standard security measures, including encryption in transit (TLS) and at rest.

We implement access controls, regular security reviews, and use Firebase Authentication with secure session management. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. If you request account deletion, we will remove your personal data within 30 days, except for information we are required to retain by law or for legitimate business purposes (such as billing records). Content that has been published on live menus may be retained in anonymized form.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing activities based on legitimate interest.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the information below. We will respond within 30 days.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers (Google Cloud, Stripe, Vercel) maintain servers. These transfers are carried out under appropriate safeguards, including standard contractual clauses and the providers' data protection frameworks.

10. Children's Privacy

MÉNU by Interatek is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or through a notice on the platform. The updated policy will indicate the new effective date. Your continued use of the service after changes take effect constitutes acceptance of the revised policy.

12. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, you may contact us at:

support@interatek.com

Wyoming, United States