Privacy Policy

Owner account data: your email address, and the phone number you use when you contact us on WhatsApp.

Venue and menu content you provide or approve: business identity, menu text, prices, photos, and files you upload.

Google Place IDs and transient lookup results when you or we look up a venue. We keep only content Google permits us to retain; durable venue facts and media otherwise come from you or another permitted source, with required attribution.

If you upgrade to a paid plan, the billing provider shown at checkout records the subscription, billing contact, payment status, and transaction details needed to process and support the purchase. MenuAsk does not receive or store your full card details.

Usage and technical data: marketing and signed-in product/page analytics (PostHog, EU region), sanitized error and performance telemetry (Sentry when configured and Vercel Speed Insights), and standard server logs. Public menu hosts do not load implicit PostHog capture; Basic Insights stores only daily counts for menu views, QR opens, broad source categories, and call, directions, or WhatsApp clicks. Guests browsing a menu do not create accounts.

If a venue enables AI menu help, MenuAsk temporarily stores the guest questions and assistant answers needed to continue that conversation, plus a signed essential session cookie that reconnects the same browser. The cookie is not an advertising identifier.

To create, host, and serve your menu site; to prepare a private preview before you save it to an account; to sign you in with one-time email codes; to answer you on WhatsApp or email; and to improve the product using aggregate analytics.

Menu files and text you provide are processed by AI services to extract structured menu content. We do not use them to train our own models; third-party providers process them under their applicable terms and configuration.

For AI menu help, a guest question is processed only to answer about that venue’s current published menu and information. The provider route is required to use verified zero-data-retention and no-training settings.

We process data to perform our service for you, with your consent where required, and under our legitimate interest in operating and improving MenuAsk, in line with the Israeli Privacy Protection Law, 5741-1981, and, where applicable, the GDPR.

We use service providers to run MenuAsk: Vercel (hosting, performance, and AI Gateway), Supabase (database and authentication), PostHog EU (analytics), Sentry when configured (error monitoring), Google Maps Platform (transient venue lookup and permitted attributed content), evaluated AI providers for menu extraction and AI menu help, and Polar as Merchant of Record for paid subscriptions. Each receives only what it needs to provide its function.

We do not sell personal data.

MenuAsk uses Google Maps Platform content under the Google Maps Platform Terms of Service and Google Privacy Policy, which are incorporated into this policy by reference.

Essential cookies keep you signed in and secure sessions working. AI menu help uses a short-lived, signed, host-only session cookie so the same browser can continue or clear its temporary conversation. On marketing and signed-in routes, product analytics may use first-party browser storage or identifiers to measure use and diagnose problems. Session replay and console recording are disabled. The Basic Insights recorder keeps aggregate daily counts rather than guest profiles or raw IP/device identifiers. We do not use advertising cookies.

Account and venue data is kept while your account is active. Unclaimed private previews are deleted or anonymized after a reasonable period. AI menu-help conversations expire after 24 hours, and their message content is scheduled for deletion no later than 48 hours after creation; choosing Clear schedules the content for deletion immediately. Minimized operational and cost receipts may remain for 90 days, or 180 days for unresolved or above-limit cost incidents, without the message text or direct conversation, session, menu, or snapshot link. Logs and analytics are retained for limited windows set by our providers.

You may ask to access, correct, export, or delete your personal data at any time: hello@menuask.com. If your venue appears in a private preview you did not request, contact us and we will remove it.

Data is protected in transit and at rest by our providers; access to production data is restricted. No method is 100% secure, but we design for least access.

MenuAsk is a business tool and is not directed at children.

We will update this policy as the product evolves and note the date above. Material changes will be communicated on this page.