Privacy Policy

1. Introduction

Only Menu ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our QR code menu management platform.

By using Only Menu, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Email address (required for account creation)
• Password (encrypted and securely stored)
• Account preferences and settings

Business Information:

• Cafe/restaurant name and details
• Business description
• Contact information
• Location details
• Operational preferences

Menu Content:

• Category names and descriptions
• Product names, descriptions, and prices
• Product images and logos
• Menu organization and structure

2.2 Information Collected Automatically

Technical Information:

• IP address
• Browser type and version
• Device information
• Operating system
• Access times and dates
• Pages viewed and features used

3. How We Use Your Information

3.1 Primary Services

• Account Management: Create, maintain, and secure your account
• Menu Generation: Create and display your digital menus and QR codes
• File Storage: Store and serve your uploaded images and logos
• Service Delivery: Provide core platform functionality
• Customer Support: Respond to your inquiries and provide assistance

4. Third-Party Service Providers

We use the following third-party services:

Supabase:

• Purpose: Database storage, authentication, file storage
• Data shared: Account information, menu data, uploaded files
• Privacy policy: https://supabase.com/privacy

Cloudflare Turnstile:

• Purpose: Bot protection and CAPTCHA verification
• Data shared: Browser information, IP address
• Privacy policy: https://www.cloudflare.com/privacy/

5. Data Security

We implement industry-standard security measures:

• Encryption: Data is encrypted in transit and at rest
• Authentication: Secure user authentication systems
• Access Controls: Restricted access to user data
• Regular Security Audits: Ongoing security assessments
• Secure Infrastructure: Protected servers and databases

6. Your Privacy Rights

As a user located in the European Union, you have specific rights under the General Data Protection Regulation (GDPR). You have the right to:

• Access: View your personal information and account data
• Rectification: Update your account information and preferences
• Erasure ("Right to be Forgotten"): Request deletion of your account and associated data
• Data Portability: Download your menu data and content in a structured format
• Restriction of Processing: Limit how we process your data
• Object to Processing: Object to certain types of data processing

6.1 Exercising Your GDPR Rights

You can exercise your GDPR rights directly through our platform:

• Data Export: Access your GDPR Compliance page in your account settings to download all your data
• Data Deletion: Use the GDPR Compliance page to permanently delete your account and all associated data
• Account Access: Log into your account to view and modify your personal information

To access these features:

1. Log in to your Only Menu account
2. Click on your user menu (top-right corner)
3. Select "GDPR Compliance" from the dropdown menu
4. Choose whether you want to export or delete your data

7. Contact Information

For privacy-related questions or concerns:

• Email: developer@ozgorkem.com
• Subject Line: Include "Privacy Policy" in your subject line
• Response Time: We aim to respond within 48 hours