Privacy policy

Who controls your data

Digital Menu is the controller for owner accounts and service operations. Privacy requests: support@digitalmenu.faridfajrak.com.

Data, purposes and legal bases

• Owner and staff account data: email, display name, authentication records and support activity, used to provide and secure the service, perform the contract and prevent abuse.
• Venue and menu data: venue identity, menu text, prices, languages, uploaded images and publication settings, used to build, host and publish the menu at the owner’s instruction.
• Billing and audit records: plan, transaction/provider references, entitlement and minimized privileged-action records, used to perform the contract, meet accounting duties and protect legitimate security interests.
• Scan analytics: time, QR identity and country-level geography. Raw IP addresses and diner profiles are not stored at rest; no advertising analytics are installed.
• Operational data: bounded logs, job status, aggregate AI cost and availability facts, used for security, reliability, abuse prevention and cost control.

AI processing

When an owner requests an AI feature, configured AI routes may receive venue menu text or images needed for that request. They do not receive diner scan histories or diner profiles. AI results remain subject to owner review before publication where the product flow provides review.

Cookies

Essential, secure authentication cookies keep owners and authorized staff signed in. They are not advertising cookies and are not used to track diners across sites.

Recipients and transfers

Data is shared only with the service categories in the current subprocessor register, payment/accounting authorities when legally required, and professional advisers bound by confidentiality. Where processing leaves the EEA, the operator uses an applicable adequacy decision or contractual transfer safeguards.

Retention and erasure

Expired authentication artifacts are removed on the configured short retention schedule; raw scan facts retain no more than 13 complete months. Owner-requested erasure immediately disables sessions and public menus and is completed through the resumable deletion workflow. Minimized financial, security-audit and aggregate cost facts may remain where legally or operationally required. Isolated backup copies expire within 35 days, and erasure tombstones are replayed before a restore can serve traffic.

Your rights

Depending on the legal basis and applicable law, you may request access, correction, erasure, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. Contact support@digitalmenu.faridfajrak.com. You may also complain to your competent EEA supervisory authority. Identity may be verified before a request is fulfilled.

Changes

Material changes receive a new document version and effective date. The version shown above identifies the notice that applies now.