Privacy Policy

Overview

MenuLolo ("we", "us", "our") operates the menulolo.com website and the menu-builder service offered through it (the "service"). This policy explains what personal data we collect, why we collect it, how long we keep it, and the choices and rights you have.

It applies to everyone who visits the site or holds a MenuLolo account. By creating an account or using the service you agree to this policy.

Data we collect

We collect only the data needed to run the service. Depending on how you use MenuLolo, this may include:

• Account data — your email address and account settings; if you sign in with Google, your Google account email and basic profile.
• Content data — photos you upload, menu content you create (dishes, descriptions, prices, translations), and the public menu pages you publish.
• Payment data — subscription status and billing history. Payments themselves are handled by our payment processor; we never receive or store full card numbers.
• Usage data — pages visited and feature interactions, collected only with your cookie consent.
• Support data — messages you send us when you ask for help.

How we use data

We use your data to provide and operate the service you signed up for — creating and hosting your menus, processing photos, managing your subscription, and serving your public menu pages to your guests.

We also use limited data to keep the service secure and reliable (preventing abuse and diagnosing faults), to send service and billing notices you need to know, and — where required — to comply with law.

Where data protection law requires a legal basis, we rely on: performance of our contract with you for service delivery; our legitimate interests for security and service improvement; your consent for optional analytics; and legal obligation for accounting and tax records.

Google sign-in

When you use "Continue with Google", authentication is handled by Google together with our authentication provider. We receive your email address and basic profile information and nothing more — we never see your Google password.

You can revoke MenuLolo's access at any time from your Google account settings. Revoking access does not automatically delete your MenuLolo account — you can do that separately from account settings.

Photos and AI processing

Photos you upload are stored in cloud object storage. They are processed by our AI provider solely to produce the enhanced image you requested.

We do not use your photos or menus to train AI models, we do not sell them, and we do not share them with advertisers. Your photos and results are visible only to you — and, once you publish a menu, to the guests who open that menu.

Payments

Subscriptions and credit packs are purchased through our payment processor. When you pay, the processor receives your payment details and billing information and handles card data under its own security program.

We store what we need to recognize your subscription — your plan, billing period and payment status — plus the invoices and receipts your processor makes available to you, and payment event records used for reconciliation and dispute handling.

Storage and retention

Your data is stored on cloud infrastructure operated by our service providers (see "Service providers" below).

When you delete your account, all personal data — including photos, menus and billing-linked identifiers — is permanently deleted after a 30-day grace period, except records we must keep by law.

• Account data — kept while your account is active.
• Photos, AI results and menus — kept while your account is active, or until you delete them (deleted items are removed for good after a short recovery window).
• Billing records — kept as long as required by tax and accounting rules.
• Usage logs — kept for a limited period, then aggregated or deleted.

Cookies

We use a small number of essential cookies and browser storage for session and language preference — these are required for the service to work.

Analytics cookies load only after you give consent, and declining leaves every feature fully functional. We do not run third-party advertising trackers.

Your rights

You can view and delete your personal data at any time from account settings; to access, export or correct it, contact [email protected]. We respond to requests within 30 days.

If you are in the EU/EEA or a jurisdiction with comparable laws, you additionally have the right to restrict or object to processing, to data portability, and to lodge a complaint with your supervisory authority.

Security

We protect your data with encryption in transit and at rest, strict access controls, and scoped credentials. Full card numbers are never stored on our systems.

No method of transmission or storage is completely secure. If a data breach ever affects you, we will notify you and the relevant authorities as required by law.

Service providers

We rely on a small set of companies to run MenuLolo: an authentication and database provider, a cloud hosting and object-storage provider, an AI image processor, a payment processor, and a consent-based analytics tool.

Each provider processes data only on our instructions, under contract, with confidentiality obligations. We do not sell personal data to anyone.

International transfers

Our service providers may process data in countries other than your own, including outside the EU/EEA. Where that happens, we rely on recognized safeguards — such as contractual data-protection clauses — to ensure your data receives equivalent protection.

Children

The service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We will notify you of material changes by email or in-app notice before they take effect. Continued use after that date constitutes acceptance.

Contact

Privacy questions, requests and complaints: [email protected].