Privacy Policy

1. Information We Collect

Information you provide directly:

• Account details: name, email address, password
• Business/menu information: menu names, categories, items, prices, descriptions, images, allergens, address, phone number, social links, and logo
• Billing information, processed by our payment provider, Paddle (we do not store full payment card details ourselves)
• Correspondence when you contact support

Information collected automatically:

• Usage data: pages visited, actions taken within the dashboard, timestamps
• Device and log data: IP address, browser type, operating system
• Cookies and similar technologies, as described in Section 6

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including your public menu pages
• Process subscriptions, trials, and payments
• Communicate with you about your account, updates, or support requests
• Monitor and improve the Service's performance, security, and reliability
• Detect, prevent, and address fraud, abuse, or technical issues
• Comply with legal obligations

3. Public Menu Content

Menu content you publish (names, prices, descriptions, images, allergens, business contact details, and similar) is displayed publicly to anyone who scans your QR code or visits your menu's public URL. Do not include information in your menu content that you do not intend to make public.

4. How We Share Information

We do not sell your personal information. We may share information with:

• Service providers who help us operate the Service, including:
  • Paddle (payment processing)
  • Cloudflare (proxying, security, and anti-DDoS protection)
  • Zoho (email delivery and support correspondence)
  • Our hosting provider is webdock.io, based in Denmark
  These providers are bound by confidentiality and data protection obligations.
• Legal or safety reasons, if required to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of JustYourMenu, our users, or others
• Business transfers, in connection with a merger, acquisition, or sale of assets, with notice to affected users where required

5. Data Retention

We retain account and menu information for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements.

You may request deletion of your account and associated data at any time by contacting us. When an account is deleted, we permanently remove the related data from our production database. We do not restore user data upon request.

Residual copies may remain in automated backups (VPS snapshots and database backups) for a short period (typically a few days) and are used only for disaster recovery. These residual copies are not actively processed and are overwritten in the normal backup cycle.

6. Cookies

We use cookies and similar technologies for the following purposes:

• Essential: keeping you logged in and remembering your language preference
• Security: CloudFlare Turnstile to protect forms from abuse

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service, such as staying logged in.

7. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including industry-standard password encryption and secure server configuration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at [email protected].

European Economic Area / UK (GDPR)

If you are located in the EEA or UK, we process your personal data on the following legal bases: performance of a contract (providing the Service), legitimate interests (security, service improvement, fraud prevention), and consent where required (certain cookies). You have the right to lodge a complaint with your local Data Protection Authority.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion of your personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information. To exercise these rights, contact us at the email above. We will not discriminate against you for exercising your rights.

9. Children's Privacy

The Service is not directed to individuals under the age of 18 (or the age of legal majority in their jurisdiction) and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

10. International Data Transfers

Your information is primarily processed and stored on servers located in EU, Denmark. It may also be accessed by us from Serbia in the course of operating the Service. Where required, we take steps to ensure such transfers comply with applicable data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by email or an in-app notice, before the changes take effect.

12. Contact

Questions about this Privacy Policy can be sent to [email protected].