Privacy Policy

1. Who We Are

MenQR ("we", "us", "our") is a digital menu platform for Pakistani restaurants, operated from Pakistan. When you use our service at menqr.pk, you agree to the collection and use of information described in this policy.

2. What We Collect

• Account information: Your name, email address, and restaurant details (name, phone, address, logo) when you sign up and set up your restaurant.
• Menu content: Categories, item names, descriptions, prices, and photos you upload to build your digital menu.
• Anonymous analytics: When a customer scans your QR code, we record a scan event (timestamp + restaurant ID only). We do not collect customer names, phone numbers, or any personal data from menu viewers.
• Usage data: Standard server logs including IP address, browser type, and pages visited. These are used for security and performance only.

3. How We Use Your Data

• To create and manage your MenQR account and digital menu.
• To display your menu to customers who scan your QR code.
• To provide scan analytics on your dashboard (total scans, recent activity).
• To send you service-related emails (billing receipts, account alerts). We do not send marketing emails without your consent.
• To improve and secure our platform.

4. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to any third party, ever. Your restaurant's menu data belongs to you. We will never use it for advertising or share it with competitors.

5. Data Storage & Third-Party Services

We use the following trusted services to run MenQR:

• Supabase — stores your account data, menu content, and scan records in a PostgreSQL database. Supabase is SOC 2 compliant and stores data on servers in the EU (Frankfurt region).
• Vercel — hosts our web application. Vercel is SOC 2 compliant. Edge functions may process requests globally for performance.
• Anthropic Claude API— used only when you click "AI Generate" to create a menu item description. Only the item name you provide is sent to Anthropic. No personal account data is shared.

6. Cookies

We use a single session cookie to keep you logged in to your dashboard. This cookie is essential for the service to function and cannot be disabled while using MenQR. We do not use advertising cookies, tracking pixels, or third-party analytics scripts (e.g., Google Analytics).

7. Data Retention

Your data is retained as long as your account is active. If you cancel your subscription and request account deletion, we will permanently delete all your data (account, menu, images, scan records) within 30 days.

8. Your Rights

• Access: Request a copy of all data we hold about you.
• Correction: Update or correct your information at any time from your dashboard.
• Deletion: Request complete deletion of your account and all associated data.
• Portability: Request an export of your menu data in JSON format.

To exercise any of these rights, contact us at admin@menqr.com.

9. Children's Privacy

MenQR is a business service intended for adults (18+). We do not knowingly collect data from anyone under 18.

10. Changes to This Policy

If we make material changes to this policy, we will notify registered users by email at least 14 days before the change takes effect. Continued use of MenQR after that date constitutes acceptance of the new policy.

11. Contact

Questions about this policy? Reach us at admin@menqr.com or on WhatsApp at 03065967492.