Privacy Policy

1. Two kinds of users

• Restaurants (owners and their staff) who create a Menzora account. For their account information, Menzora decides how it is used.
• Customers who order from a restaurant’s website. We collect their information on behalf of that restaurant, which decides how it uses it. Customers with questions about a restaurant’s practices should contact the restaurant as well as us.

2. Information we collect

From restaurants

• Account details: name, email address, password (stored only as a one-way hash), and role.
• Business details: restaurant name, web address, phone, address, hours, menu, prices, tax rate, photos, logo, and site content.
• Sign-up attempts: the email, restaurant name, and web address entered on the sign-up form, whether or not an account is created. We use these to manage early access and prevent abuse.
• Payment account details: when you connect Stripe, Stripe collects your identity, business, and bank information directly. We receive your Stripe account ID and its status, not your bank details.
• Menu import files: photos or PDFs you upload to import a menu.

From customers

• Order details: name, email address, phone number (if given), items ordered, special instructions, promo codes, totals, and pickup status.
• Payment information: card details are entered on Stripe’s checkout and go directly to Stripe. Menzora never receives or stores full card numbers.

Automatically

• Technical data: IP address, browser type, and request logs that our hosting providers record to run and secure the service.
• Browser storage: we keep your sign-in session and your shopping cart in your browser’s local storage. We don’t use advertising cookies or third-party analytics trackers.

3. How we use information

• To provide the service: host restaurant websites, take and route orders, show live orders and reports, and send order updates.
• To process payments through Stripe and handle refunds and disputes.
• To manage accounts, trials, plans, and billing, and to contact restaurants about their account.
• To keep the service secure, prevent fraud and abuse, and enforce our Terms of Use.
• To fix problems and improve the service.
• To meet legal obligations.

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising.

4. How we share information

• With the restaurant you order from. Your order details go to that restaurant so it can prepare your order and contact you about it.
• With Stripe, our payment processor, to process payments and verify restaurants’ accounts. Stripe uses this information as described in the Stripe Privacy Policy. Restaurants’ use of Stripe is also governed by the Stripe Connected Account Agreement.
• With service providers that run parts of Menzora for us under contract: Render (hosting and database), Cloudflare (image storage), and Anthropic (reading uploaded menu files when a restaurant uses AI menu import). They may use the information only to provide their services to us.
• For legal reasons, when required by law or to protect the rights, property, or safety of Menzora, our users, or others.
• In a business transfer, such as a merger or acquisition, subject to this policy.

5. How long we keep it

We keep restaurant account information while the account is open and for a reasonable period afterward. We keep order records for as long as the restaurant’s account is open, since restaurants need them for reports, refunds, and tax records, and longer where the law requires. When information is no longer needed, we delete or anonymize it.

6. Security

We use encryption in transit (HTTPS), hashed passwords, access controls that keep each restaurant’s data separate, and a payment flow in which card data never touches our servers. No system is perfectly secure, so we can’t guarantee absolute security.

7. Your choices and rights

• Restaurants can view and update most of their information in the dashboard.
• You can ask us to access, correct, delete, or export your personal information by emailing [email protected]. If we hold your information on behalf of a restaurant, we may refer your request to that restaurant.
• Depending on where you live (for example, California or the EU/UK), you may have additional rights. We won’t discriminate against you for using them.

8. Children

Menzora isn’t directed to children under 13, and we don’t knowingly collect their personal information.

9. Where information is processed

Menzora is operated from the United States, and information is stored and processed in the United States.

10. Changes

We may update this policy. If we make material changes, we’ll update the date above and notify restaurants by email or in the dashboard.

11. Contact

Questions or requests? Email [email protected].