1. Introduction
Serviggo MenuMaker ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital menu creation platform.
This policy applies to all users of our Service, including website visitors, registered users, and subscribers. By using our Service, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Personal Information
We collect personal information that you voluntarily provide when:
- Creating an account (email, name, password)
- Using Google OAuth authentication (Google profile information)
- Subscribing to paid services (billing information)
- Contacting customer support
2.2 Business Information
For restaurant accounts, we collect:
- Restaurant name and description
- Business address and contact information
- Menu content, items, prices, and descriptions
- Images and media files
- Currency and language preferences
2.3 Technical Information
We automatically collect technical data including:
- IP address and device information
- Browser type and version
- Operating system and platform
- Pages visited and time spent
- Referral sources
2.4 Usage Data
We track how you use our Service to improve functionality:
- Features used and frequency
- Menu creation and editing patterns
- QR code access statistics
- API usage and performance metrics
3. How We Use Your Information
We use your information to:
- Provide and maintain our Service
- Process transactions and manage subscriptions
- Enable AI-powered features and translations
- Generate QR codes and public menu access
- Provide customer support and respond to inquiries
- Send important updates and service notifications
- Improve our Service and develop new features
- Ensure security and prevent fraud
- Comply with legal obligations
4. Google OAuth Integration
When you sign in with Google, we receive:
- Your Google account email address
- Your name and profile picture
- Basic profile information
We do not access your Google Drive, Gmail, or other Google services beyond basic profile information. You can revoke Google access at any time through your Google account settings.
5. AI Content Processing
5.1 AI Features
Our AI-powered features include:
- Automatic menu translation to 21+ languages
- Content enhancement and optimization
- Image processing and analysis
- Menu item suggestions and improvements
5.2 Third-Party AI Processing
We use OpenAI and other AI service providers to process your content. When you use AI features:
- Your menu content may be sent to AI providers for processing
- Processing is done solely to provide the requested service
- AI providers are bound by their own privacy policies
- We do not use your content to train AI models
5.3 AI Consent
By using AI features, you explicitly consent to content processing. You can opt-out of AI features in your account settings.
6. Data Storage and Security
6.1 Cloud Storage
Your data is stored on Google Cloud Platform, which provides:
- Industry-standard encryption in transit and at rest
- Regular security audits and compliance certifications
- Redundant backup systems
- Geographic data replication for availability
6.2 Security Measures
We implement security measures including:
- HTTPS encryption for all data transmission
- Secure authentication with JWT tokens
- Regular security updates and patches
- Access controls and monitoring
- Regular security assessments
6.3 Data Retention
We retain your data:
- Account data: Until you delete your account
- Menu data: Until you delete your menus
- Transaction records: As required by law (typically 7 years)
- Usage logs: Up to 2 years for service improvement
7. Data Sharing and Disclosure
7.1 Public Information
The following information is publicly accessible:
- Published menu content accessed via QR codes
- Restaurant name and basic information
- Menu items, prices, and descriptions you choose to publish
- Public API data for published menus
7.2 Service Providers
We share data with trusted service providers for:
- Cloud hosting and storage (Google Cloud Platform)
- Payment processing (Stripe, PayPal)
- AI content processing (OpenAI)
- Email delivery services
- Analytics and monitoring tools
7.3 Legal Requirements
We may disclose information when required by law or to:
- Comply with legal processes or government requests
- Protect our rights and property
- Ensure user safety and service security
- Investigate fraud or abuse
8. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure adequate protection through:
- Google Cloud Platform's global security standards
- Adherence to international privacy frameworks
- Contractual safeguards with service providers
- Regular compliance assessments
9. Your Rights and Choices
9.1 Access and Correction
You have the right to:
- Access your personal data
- Correct inaccurate information
- Update your account settings
- Download your data
9.2 Data Deletion
You can:
- Delete individual menu items and content
- Delete your entire account and associated data
- Request deletion of specific information
9.3 Data Portability
You can export your data in standard formats including:
- Menu data in JSON format
- Account information
- Usage statistics
9.4 Opt-Out Options
You can opt-out of:
- Marketing communications
- AI content processing
- Usage analytics
- Non-essential cookies
10. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
For users in the EU, our Service is not intended for children under 16 without parental consent.
11. Regional Privacy Laws
11.1 GDPR (European Union)
If you are in the EU, you have additional rights including:
- Right to object to data processing
- Right to restrict processing
- Right to lodge complaints with supervisory authorities
- Enhanced consent requirements
11.2 CCPA (California)
California residents have rights to:
- Know what personal information is collected
- Know if personal information is sold or shared
- Opt-out of sale of personal information
- Non-discrimination for exercising privacy rights
11.3 Other Jurisdictions
We comply with applicable privacy laws in all jurisdictions where we operate, including Canada, Australia, and other regions with specific privacy requirements.
12. Contact Information
For privacy-related questions or requests, contact us at:
This Privacy Policy is effective as of December 2024 and supersedes all previous versions. We are committed to protecting your privacy and handling your data responsibly.