Privacy Policy

Belmenuis a cloud software (SaaS) service built for restaurant owners to create, manage, and publish a digital menu through a dedicated link or a custom domain. It is referred to in this policy as "the platform" or "we".

This policy applies to everyone who uses the platform, whether you are an account holder (restaurant owner or staff) or a visitor browsing menu pages published through it.

We only collect the data necessary to deliver the service reliably and securely:

• Account data: name, email address, password (hashed), restaurant name, and your subdomain.
• Restaurant content: categories, products, prices, images, branding settings, and the contact information shown to your customers (phone, WhatsApp, Instagram, map location).
• Billing and subscription data: subscription plan, free trial status, activation and renewal dates, and payment notifications. We do not store card details; payments are processed directly by an authorized payment provider.
• Technical usage data: IP address, browser and operating system, error logs, and aggregated non-identifying performance metrics used to improve and secure the service.
• Information you send voluntarily: messages sent to support and any optional attachments (such as payment proofs).

We only use your data for the following legitimate purposes:

• Operating your account, displaying your menu to customers, and allowing you to manage it.
• Managing your subscription, issuing invoices, verifying payments, and contacting you about anything related to your plan or renewal.
• Providing technical support and resolving any issues you may encounter.
• Protecting the platform from misuse, detecting fraud attempts, and keeping the service stable.
• Improving the product and developing new features based on aggregated, non-identifying usage statistics.
• Sending operational notices about the service (such as policy updates, scheduled maintenance, or security advisories).

We process your data based on one of the following grounds: performance of the contract we have with you to provide the service, compliance with our legal obligations, our legitimate interest in operating and securing the platform, or your explicit consent where applicable laws require it.

We do not sell or trade your personal data. We may share the minimum necessary data with trusted service providers acting on our behalf and bound by confidentiality agreements, only to the extent required to operate the service:

• Cloud hosting and file/image storage providers.
• Electronic payment providers used to process subscription fees.
• Email and notification providers used to deliver operational messages.
• Government or judicial authorities where a binding legal obligation requires disclosure.

We choose providers that maintain appropriate data protection standards and limit their access to the minimum needed to perform their work.

We use three categories of cookies:

• Essential: required to keep you signed in and secure access to the dashboard. These cannot be disabled without losing the ability to use the platform.
• Google Analytics: we use Google Analytics 4 independently for traffic, event, and performance measurement.
• Microsoft Clarity: we use Microsoft Clarity independently for behavioral analytics (such as heatmaps and session recordings).

The cookie banner provides three toggles (Essential / Google Analytics / Microsoft Clarity). Essential is always on and cannot be disabled, while Google Analytics and Microsoft Clarity can be enabled or disabled independently. You can save your choices via Save Preferences or enable all via Accept All.

We do not currently use cookies for advertising or remarketing purposes.

We retain your data for as long as you use the service and for the period needed to fulfill the purposes described in this policy, or for the period required by financial and accounting regulations for billing records. When you cancel your account, we delete or anonymize data that is no longer required to be retained, within a reasonable timeframe.

We apply appropriate technical and organizational measures to protect your data, including HTTPS encryption in transit, password hashing, logical separation of each restaurant's data, strict access controls, and monitoring for unusual activity. No system connected to the internet can be fully secure, and we will inform you of any material security breach affecting you as required by applicable laws.

You have the right at any time to:

• Access your personal data and obtain a copy of it.
• Correct inaccurate or incomplete data.
• Request deletion of your data when it is no longer needed, subject to legal retention obligations.
• Withdraw your consent for any processing based on consent.
• Object to or restrict certain processing where the law allows it.

To exercise any of these rights, contact us at privacy@belmenu.com. We will respond within a reasonable timeframe and may need to verify your identity before acting on the request.

The platform is intended for commercial use by restaurant owners and is not directed at anyone under the age of 18. We do not knowingly collect data from minors, and if we become aware of such data we will delete it promptly.

Some data may be processed or stored by infrastructure providers located outside your country of residence. In all cases we rely on providers that maintain appropriate data protection standards and contractual safeguards that ensure data security.

We may update this policy from time to time to reflect changes in the service or in applicable laws. The last updated date will always appear at the top of this page, and for material changes we will make reasonable efforts to notify you in advance via email or through the dashboard.

For any privacy or data processing inquiry, contact us through:

• Email: privacy@belmenu.com
• Service operator: Belmenu platform