Privacy Policy

Who We Are

Menufier is a service provided by Evgenii Litvinov, Individual Entrepreneur, registered in Georgia at Georgia, Tbilisi City, Samgori District, Police Lane I, N5 (ID No. 306416964). Menufier enables restaurants to create and manage digital menus accessible via unique public links.

For privacy inquiries, contact us at [PRIVACY_EMAIL].

Data We Collect

Account Data

• Email address — used for authentication via magic link
• First and last name — optional, stored if you provide them in your profile

Restaurant Data

• Restaurant name, description, and address
• Working hours
• Contact details (phone, Instagram, Facebook, Telegram handles)
• Currency and language preferences
• Logo, cover photo, and gallery images

Menu Data

• Menu categories and item names
• Item descriptions and prices
• Menu item images

Technical Data

• Session cookies for authentication
• Server-side error logs for debugging

We do not currently process payments within the service. If we add payment processing in the future, card details will be handled by a third-party payment provider — we will not store them directly.

How We Use Data

We use your data to:

• Authenticate you and maintain your session
• Store and display your restaurant and menu information
• Generate your public menu page when you choose to publish
• Send you transactional emails (magic links for login)
• Debug errors and maintain service stability

Where required by law, we process data based on your consent, contractual necessity, or our legitimate interests in providing the service.

Sharing & Third-Party Processors

We use the following services to operate Menufier:

We do not sell or rent your data. Processors handle data under agreements that require them to protect it appropriately.

Disclosure for Legal Requests

We may disclose personal data if required by law, court order, or valid governmental request.

Business Transfers

If Menufier is involved in a merger, acquisition, reorganization, or sale of assets, personal data may be transferred as part of that transaction. We will notify users of any such change as required by applicable law.

Public Content

When you publish your menu, the following becomes publicly accessible at your unique menu URL:

• Restaurant name, description, and address
• Working hours and contact details you provided
• Logo, cover photo, and gallery images
• Menu categories, item names, descriptions, and prices
• Menu item images

Important: Public menu pages may be indexed by search engines and cached by browsers or CDNs. Once published, you cannot fully control how third parties may have copied or cached this content. You can unpublish your menu at any time to remove it from our service.

Cookies

We use essential cookies only for authentication session management. These cookies:

• Maintain your logged-in session
• Are required for the service to function
• Are managed by Supabase

We do not use third-party analytics, advertising, or tracking cookies.

Data Retention

• Account data: Retained while your account is active
• Restaurant and menu data: Retained while your account is active
• Uploaded images: Retained while your account is active
• Server logs: Retained for a limited period for debugging purposes

When you delete your account, we initiate deletion of your data. Note that:

• Backup systems may retain copies for a limited time before purging
• Publicly cached or indexed content is outside our control
• Aggregated, anonymized service metrics may be retained for reliability and service improvement

International Transfers

Our service providers (Supabase, Vercel) may process data in countries outside your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

User Rights

Depending on your location, you may have rights to:

• Access your data (available via your dashboard)
• Correct your data (available via your dashboard)
• Delete your account and data (available via account settings)

Security

We implement security measures including:

• Encrypted connections (HTTPS/TLS)
• Row-level security policies limiting data access to owners
• Passwordless authentication via magic links
• User-namespaced file storage

We rely on Supabase's infrastructure security for database and storage protection.

Changes to This Policy

We may update this policy. For significant changes, we will notify you via email or in-app notice. Continued use after changes constitutes acceptance.

Contact

For privacy questions or requests: