Privacy Policy

Who we are

MENU-MADE provides menus, websites, Google Business Profile care and related services to businesses. Contact us at info@menu-made.com.

What we collect

• Details you give us: your name, business name, email, phone, and the materials you send for your service, such as menus, logos, photos, website addresses, business hours and change requests.
• Payment details: payments are handled by Stripe. We receive the payment status, your billing contact details and the last digits of your card from Stripe; we never see or store your full card number.
• Google Business Profile data: if you connect your Google account, see the next section.
• Site usage: a random identifier kept only for your browsing session (not a cookie), the pages and services you view, and where you came from (for example a campaign link), so we can see which pages help people choose a service. We skip this entirely if your browser sends Global Privacy Control or Do Not Track. We don’t use advertising cookies.
• Email records: which service emails we sent you and whether they were delivered.

Google user data

Some services (Review Replies, Google Profile Care and Google Visibility) need access to your Google Business Profile. You grant it through Google’s own sign-in screen, which asks for the “manage your business listings” permission (business.manage). With it we:

• read your business profile: name, address, phone, website, hours, description, categories, attributes, photos and reviews;
• read your profile’s performance figures (views, calls, direction requests and website clicks) for your monthly report;
• post replies to reviews, publish posts and photos, and update your description, website, phone, menu link and logo, but only as part of the service you bought and, where the service says so, after approval.

We use Google user data only to provide the service you bought. We do not sell it, use it for advertising, or use it to train AI models. We share it only with the processors listed below as needed to provide the service. The text of reviews and your profile details are sent to our AI provider to draft replies, posts and descriptions; that provider does not use it to train its models.

We keep your Google access token encrypted. You can remove our access at any time at myaccount.google.com/permissions; the service then pauses and we email you a link to reconnect. When your plan ends we stop using your Google data, and you can ask us to delete what we hold at any time.

MENU-MADE’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

• To provide, deliver and support the services you buy, and to send you service emails such as connect links, approvals, reports and receipts.
• To take payment and manage subscriptions.
• To check our work and keep the services secure and working.
• To understand which pages help people choose a service.

Who processes information for us

• Stripe: payments, invoices and the billing page.
• Cloudflare: website hosting, our database and file storage.
• Anthropic: the AI model that reads menus and drafts replies, posts, descriptions and reports.
• Resend: sending email.
• Google: the Business Profile APIs you connect.
• GitHub: turning the designs for your social posts and app icons into image files.

How long we keep it

We keep order, payment and service records for as long as you’re a customer and for the period the law requires for business records. Materials you send for a service are kept while the service is active so we can keep your menu, website or app up to date. You can ask us to delete your information at any time; we’ll do so unless we must keep it by law.

Your choices

• Ask for a copy of your information, or ask us to correct or delete it, by emailing info@menu-made.com.
• Remove Google access at any time from your Google account.
• Switch or cancel a plan from your billing page link in any plan email.
• California residents have the right to know, correct and delete personal information and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context advertising.

Security

We use encrypted connections, encrypt stored Google access, sign the private links we email you so they can’t be guessed, and limit who can approve and publish work.

Children

Our services are for businesses and are not directed at children under 13.

Changes

If we change this policy we’ll update the date above, and email active customers about important changes.