Privacy Policy

1. Information we collect

When you create a Seller account or build a menu, we collect:

• Business details: business name, brand name, address, phone number, website, and social media links you choose to add
• Account details: email address and a securely hashed password (we never store your password in plain text)
• Menu content: categories, dishes, prices, descriptions, and any photos or videos you upload
• Coupon details: discount/voucher terms you configure

We also automatically log basic technical information (like IP address) for security purposes — for example, to rate-limit repeated login or signup attempts and protect against abuse.

2. What's public vs. private

Once you publish your menu, your business name, address, phone number, menu content, social/Google Business links, and active coupons are shown on your public menu page — this is the core purpose of the Platform, so customers can view it by visiting your link or scanning your QR code. Your account email and password are never shown publicly.

3. Cookies

We use a small number of essential, httpOnly session cookies to keep you logged in and to let you build a menu before creating an account:

• seller_session — keeps a logged-in Seller signed in
• admin_session — keeps a logged-in platform Admin signed in
• guest_session — lets an anonymous visitor return to an in-progress menu draft before signing up

These cookies are used only for authentication — not for advertising or tracking across other websites.

4. Third-party services we use

We rely on the following providers to operate the Platform, each of which processes a limited slice of your data on our behalf:

• Supabase — hosts our database and stores uploaded photos/videos
• Resend — delivers account verification, password reset, and related emails
• Cloudflare Turnstile — a CAPTCHA used at signup to block automated bot accounts; it may process your IP address as part of that check

5. How we use your information

We use the information above to:

• Operate your account and public menu
• Send account-related emails (verification, password reset)
• Protect the Platform against abuse (e.g. rate limiting)
• Respond to support requests

We do not sell your personal information.

6. Data retention and deletion

We retain account and menu data for as long as your account is active. If you'd like your account and associated data deleted, contact us using the details below.

7. Changes to this policy

We may update this Privacy Policy from time to time. Continued use of the Platform after an update constitutes acceptance of the revised policy.

8. Contact

Questions about this policy, or requests regarding your data, can be sent to support@searchmenu.digital.