Privacy Policy

This policy covers the Menuelo website, accounts, menu tools and contact form. The business below is responsible for the personal data used to operate the service. Contact us at hello@menuelo.com or through the contact form with questions or privacy requests.

A restaurant remains responsible for information it chooses to include in its own menu and for personal data it collects directly from guests outside Menuelo.

• Account details: your name, email, a password hash, email verification status, sign-in information and a record of the terms accepted when registering.
• Restaurant content: business details, menu files and extracted text, dishes, prices, photos, logos and settings you provide.
• Billing references: Stripe customer and subscription identifiers, plan and payment status. Card details are entered in Stripe's hosted checkout; we do not store your full card number or security code.
• Support messages: the name, email, optional business name, topic and message you submit through the contact form or send to our support address. If you send a request from the chat, this also includes the recent conversation you agree to share.
• Technical information: network and request information used for hosting, security and usage limits, plus error diagnostics filtered to remove account details, request bodies and credentials.

The virtual support assistant sends your messages and the name of a known Menuelo page to Anthropic to generate answers. It does not fetch your account records or the contents of the page you are viewing. Conversations stay in the open page's memory and are cleared when you refresh or choose Clear conversation; we do not save them to a chat history database. If you explicitly send a request to our team, the contact details, issue and recent messages are delivered to the support mailbox. Do not share passwords, security codes, full card details or private customer information in the chat.

Guests can view public menus without creating a Menuelo account. Allergy and diet filter preferences are stored in that browser's local storage; they are not sent to us as a guest health profile.

We use information to create and secure accounts, provide menu imports and editing, publish the content you choose to share, manage subscriptions, answer requests, maintain the service, prevent abuse and meet legal obligations.

Where the Brazilian General Data Protection Law (LGPD) applies, our legal bases include performing a contract or steps you request before a contract, meeting legal obligations, and legitimate interests in security and service operation after considering your rights. We seek specific consent where the law requires it. Accepting terms does not constitute blanket consent to unrelated data use.

We do not sell personal information. Submitting a contact request does not add you to a marketing list.

Before signup, we store extracted preview information so you can revisit and claim your menu. Anyone with a preview link may be able to view that preview. After publication, the restaurant's menu, business information and uploaded restaurant images are publicly accessible and may be indexed or copied by other people.

Do not upload private customer records or other confidential material as a menu or restaurant image. If you need content removed, contact us with enough information to identify it. Removal from our service cannot automatically remove copies previously saved or indexed by others.

We share the information needed for the relevant function with service providers:

• Vercel: application hosting and delivery.
• Turso: account, restaurant and menu database storage.
• Cloudflare: DNS, website protection and public restaurant image storage and delivery.
• Anthropic: AI processing for menu previews, imports, translations and virtual support answers. The files, extracted text or messages needed for that request are sent to this provider.
• Stripe: hosted checkout, subscriptions and billing management.
• Resend: account email, contact messages and support email delivery and processing.
• Upstash: temporary counters used to limit automated or excessive requests.
• Sentry: error diagnostics with the privacy filtering described above.

We may also disclose information when legally required or where necessary to address fraud, security incidents or legal claims. Access to support correspondence is limited to people handling the request and the providers needed to deliver it.

Menuelo is operated from Brazil. Its providers may process information in Brazil, the United States and other countries where they operate. Your information may therefore be transferred outside your country. Where applicable law requires safeguards for an international transfer, we rely on the relevant contractual or other lawful transfer mechanisms.

Contact us if you need more information about a provider or the safeguards relevant to your request.

We retain account and menu information while providing the service and for legitimate support, security, dispute and legal recordkeeping needs. Support correspondence remains in the support mailbox as needed to answer and follow up on requests. Unclaimed previews remain stored so they can be revisited and claimed; contact us if you need a preview removed.

Canceling a subscription stops its renewal but does not automatically delete the account or its content. You can request deletion through our contact form. Some records may need to be retained to meet a legal obligation or address a dispute, and deletion from backups or a provider's operational records may follow that provider's retention processes.

We use safeguards such as password hashing, signed session cookies, access checks, encrypted connections and restricted service credentials. No online service can guarantee complete protection against every risk.

We count visits to our public pages to understand how the site is used. This uses no cookies and no third-party analytics service. For each visit we record the page, the referring site, the approximate location (country, state and city, from our hosting provider), the browser and device type, and the IP address.

A visit is recognized within a single day through a one-way code made from the IP address and browser details that changes every day. To count unique visitors, our administrator's dashboard also groups visits that came from the same IP address while that address is kept. This grouping is worked out when the dashboard is viewed and is not stored. IP addresses are stored encrypted, are shown masked to our administrator by default, and are deleted after 90 days, after which visits can no longer be linked to each other. Requests from known bots are ignored, and we respect the Global Privacy Control and Do Not Track signals by not counting those visits.

We use a session cookie to keep account holders signed in and a location cookie to remember the restaurant being edited. Public menu filter preferences use local storage on the guest's device. We do not currently use advertising cookies or marketing pixels.

See the Cookie & Storage Policy for the names, purposes and duration of these items and how to clear them.

Subject to applicable law, you may request confirmation of processing, access, correction, portability, information about sharing, or deletion of eligible personal data. You may also withdraw consent where processing relies on it, object to eligible processing and contact the relevant data protection authority, including Brazil's ANPD where the LGPD applies.

Use the contact form and select “Privacy or data request,” or write to hello@menuelo.com. Use your account email where possible. We may ask for proportionate information to verify your identity and protect another person's data. We respond within the time required by the law applicable to the request.

The account service is intended for adults acting for a business. We do not knowingly solicit accounts from children. Contact us if you believe a child has provided account information.

We update this policy as the service changes and show the latest update date above. We provide additional notice where required for a material change. If something is unclear, get in touch.