Privacy Policy
This Policy forms part of the MenuOnGo User Agreement. Capitalised terms have the meaning given there.
1. Who This Policy Is For, and the Two Roles We Play
This Policy covers the people described below, and our legal role is different for each.
1.1 You, our customer (restaurant, café, bar, bakery, hotel and similar)
For the account data of the business and the people who run it, MenuOnGo is the controller. We decide why and how that data is processed. Articles 3 to 11 apply.
1.2 Your guests, who open Your menu
For anything captured when a guest opens Your Published Menu, You are the controller and MenuOnGo acts on Your behalf as a processor. We process guest-side data only to operate the menu and produce the analytics we show You.
This means You are responsible for: having a lawful basis for that processing, giving Your guests any notice required where You operate, and responding to any request a guest makes about their data. We will support You with reasonable assistance, but the obligation is Yours.
The one exception is advertising, described in 1.3.
1.3 Advertising on Free plan menus — we are the controller
Published Menus on the Free plan display advertisements supplied by third-party advertising providers, including Google (the "Ad Provider"). For the decision to show advertising on Free plan menus, and for the data collected for it, MenuOnGo is the controller — not the business whose menu is shown. The Ad Provider collects data through its own cookies and identifiers and uses it for its own purposes as an independent controller under its own privacy policy; where the law treats the collection on our pages as shared, we and the Ad Provider are joint controllers for that collection only. This Policy, the Cookie Privacy Notice and the notice shown on the menu together form our notice to guests.
How it works depends on where the guest is:
- Outside the United States, no advertising cookie or identifier is set, and no data is passed to the Ad Provider for personalised advertising, until the guest consents in the consent notice shown on the menu. A guest who refuses can still read the full menu. They may see non-personalised or "limited" advertisements that do not rely on advertising cookies, or no advertisement.
- In the United States, advertising cookies may be used without prior consent. Every Free plan menu carries a "Your Privacy Choices" link through which a guest can opt out at any time, and a Global Privacy Control (GPC) signal from the guest's browser is honoured as an opt-out (Article 11).
Menus in the free month and on paid Plans carry no advertising, no Ad Provider code and no consent notice.
1.4 Advertisers
If You advertise with us directly, we are the controller of the personal data of Your business and of the people who deal with us on its behalf: name, title, business contact details, billing details, advertising content (images, text, links) and campaign reports. We process this data to conclude and perform the advertising contract, to meet our tax and accounting obligations, and to check that advertisements comply with the law and our policies, and we keep it for the periods in Article 6. Advertisers receive no personal data about the guests who view the menus on which their advertisements appear — only aggregated impression and click reports.
1.5 What we deliberately do not do
- We do not sell personal data for money. Under some US state laws, however, allowing the Ad Provider's cookies on Free plan menus — and advertising cookies on our marketing site — counts as a "sale" or "sharing" of personal information. Article 11 explains this and how to opt out.
- We do not share one customer's data with another customer.
- On Published Menus, the only third-party code we allow is the Ad Provider's advertising code and the consent tool that controls it, only on Free plan menus, and a security check (Cloudflare Turnstile) that loads only when a guest opens the comment form. No analytics tags, social-media pixels or chat widgets are ever loaded on a Published Menu. Menu visits are counted without cookies and without any identifier: the menu keeps only the times of the guest's last visits on their device (see the Cookie Privacy Notice).
- We do not process orders, payments, card data or bank details. Payments are handled by our Reseller (Article 7).
- We do not build our own marketing or advertising profiles of Your guests. The Ad Provider may use data for personalised advertising under its own policy, only where the guest has consented (outside the US) or has not opted out (in the US).
2. What We Collect
2.1 Account and business data (we are controller)
| Category | Examples | Source |
|---|---|---|
| Identity | Name, business name, job role | You |
| Contact | Email address, phone number, country | You |
| Account | Username, hashed password, preferences, language | You / generated |
| Plan | Plan tier, term dates, purchase history | You / Reseller |
| Support | Messages, chat transcripts, voicemails, files You send us | You |
| Usage | Pages viewed in the dashboard, features used, timestamps | Generated |
| Technical | IP address, device type, browser, operating system | Generated |
| Marketing attribution | Referring page, campaign identifiers (such as click IDs) captured when You arrive from an advertisement | Generated |
| Referral | Referral code used at sign-up, referring account, referral status and rewards. If You sign up through a referral link, the referring account sees Your business name and the referral status. | You / generated |
Remember me. If You tick Remember me, Your email address is stored in Your browser so it's filled in next time. Untick it or clear Your browser data to remove it.
Security check. Our sign-up, password reset and contact forms, and sign-in after repeated failed attempts, are protected by a security check (Cloudflare Turnstile) that tells people from automated programs. It processes technical information about Your browser for that check only (Article 8).
2.1A Support chat and AI assistant (we are controller)
When You contact us through the chat on the Site or in the dashboard, by email or through our messaging channels, we process Your name, contact details, the content of Your messages and any files You send, together with the ticket created from them. The first reply in the chat comes from an AI assistant, which identifies itself as AI. It answers from our help content and Your account information; if it cannot resolve Your issue, it hands it to our team as a ticket, together with the conversation history and a summary You confirm. We use this data only to answer Your request, provide the service and improve our help content, and we keep it for the period in Article 6 (support messages). AI replies may contain errors; our team's written replies and our published documents prevail. We do not use support conversations to train our own AI models. For chat and AI, we select providers that do not use customer data to train their own general-purpose models. The chat and AI providers are listed on our Sub-processors page. The chat widget runs only on the Site and in the dashboard, never on Published Menus.
2.2 Menu Content (we are processor for the data inside it)
Everything You upload or create: dish names, descriptions, prices, ingredients, allergen and dietary labels, nutrition figures, images, video, business contact details, Wi-Fi password, social links, map location. You choose what goes in. If You put personal data in Your menu, You are responsible for it.
2.3 Guest-side data (You are controller, we are processor)
Menu visits are counted without any identifier. To count each visit only once, the menu keeps two times in the guest's browser storage for that menu: their last visit after scanning its QR code, and their last visit otherwise. They are never sent to us, and they are deleted once they are no longer needed (Cookie Privacy Notice, Article 3.1).
| Category | What it is |
|---|---|
| Visit | That a visit to the menu started, and when — a new visit begins after two hours without one |
| Source | Whether the visit came from a QR scan or from the web, and through which of Your share links, if any |
| Comment | Only if the guest sends one: the message, the topics chosen and the table number; and, only if the guest asks for a reply, the name and the contact (email address or phone number) they give |
For statistics, we record nothing else about the guest — no network address, device, language or location. To stop automated floods of visits, our server keeps the network address together with the menu for at most a day, only to limit how many visits one address can send.
Comments reach You in the dashboard and, as You choose, by email. They are deleted automatically 365 days after they are sent, and You can delete one earlier at any time. The comment form is protected by a security check (Cloudflare Turnstile), which processes technical information about the guest's browser for that check only.
A guest never has to give a name, email address or phone number: only a guest who asks for a reply to a comment gives one. The Application does not require a guest to create an account or install anything. We hold no profile of any guest and are technically unable to produce one.
2.3A Server access logs (we are controller)
Separately from menu statistics, our servers record each request made to the Site, the dashboard and Published Menus: the source IP address and port, the date and time, and the page requested. We keep these access logs for one (1) year in a separate, controlled environment with restricted access, to keep the service secure, to prevent abuse, and to meet the legal obligations that apply to us as a hosting provider — including Turkish Law No. 5651 and, for visitors in Brazil, Article 15 of the Marco Civil da Internet. Access logs are never used for statistics, advertising or profiling, are disclosed only to competent authorities or under a court order, and are deleted when the period ends.
2.4 Advertising data on Free plan menus (we are controller; the Ad Provider is an independent controller)
Collected only on Free plan Published Menus, mostly by the Ad Provider directly from the guest's browser.
| Category | What it is |
|---|---|
| Advertising cookies and identifiers | Cookies and similar identifiers set or read by the Ad Provider — outside the US only after consent; in the US unless the guest has opted out |
| Device and connection data | Network (IP) address, browser and device type, language, approximate location derived from the network address |
| Page information | The web address and content of the menu page, used to match advertisements to the page |
| Advertising events | Advertisements shown and tapped, and signals used to detect invalid or fraudulent traffic |
| Consent and opt-out record | The guest's choice, when it was made and the notice version, stored in a strictly necessary cookie and passed to the Ad Provider and its partners as a consent or opt-out signal |
The Ad Provider's use of this data is governed by its own privacy policy. For Google, see policies.google.com/technologies/partner-sites. The full list of the Ad Provider's partners is shown in the consent notice on the menu.
We receive from the Ad Provider only aggregated reports (for example, impressions, taps and earnings by page or country). We do not receive, and cannot produce, a profile of any guest.
When a guest taps an advertisement, they leave the Published Menu for a website or app operated by the advertiser. What happens there is governed by the advertiser's own privacy policy, not by this Policy.
2.5 What we never collect
Card numbers, bank details, government identification numbers, and any special category data (health, religion, biometrics, political opinions) — unless You choose to place such information in Your own menu Content, which we ask You not to do.
3. Why We Use It
- To create and operate Your account and deliver the Plan You chose
- To build, publish, host and serve Your Published Menu and QR codes
- To generate translations, print-ready files and the analytics we show You
- To provide support and respond to Your messages
- To send service messages: setup confirmations, term-ending reminders, security notices, changes to this Policy
- To take payment through our Reseller and keep a record of it
- To detect, investigate and prevent fraud, abuse, security incidents and breaches of the User Agreement
- To measure the effectiveness of our own advertising and improve the Application
- To display advertisements on Free plan menus through the Ad Provider — personalised only where the guest has consented (outside the US) or has not opted out (in the US) — to measure them, to record consent and opt-out choices, and to detect invalid or fraudulent traffic
- To comply with legal obligations and to establish, exercise or defend legal claims
4. Marketing
4.1 We may send You product and marketing emails about MenuOnGo. Every one contains a working unsubscribe link, and unsubscribing takes effect promptly.
4.2 Unsubscribing from marketing does not stop service messages (term reminders, security notices, changes to terms), which are part of operating Your account.
4.3 We do not sell or rent Your contact details to anyone for their own marketing.
4A. Text Messages (SMS), WhatsApp and Voicemail
4A.1 Support by text message. If You text one of our support numbers, we use Your mobile number and the content of Your messages only to answer You and to keep a record of the conversation. Text messages are handled through our support chat and messaging providers (Article 8).
4A.2 How You opt in. We text You only after You have texted us first, after You have left us a voicemail (and then only to answer it), or after You have expressly asked us to text You (for example by ticking an unticked box). We do not send You marketing text messages unless You have given separate, prior express written consent.
4A.3 Frequency and cost. Message frequency varies — usually we only reply to Your own messages. Message and data rates may apply.
4A.4 STOP and HELP. Reply STOP at any time to stop receiving text messages from us; we will send one message confirming this and nothing more. Reply HELP for help, or email info@menuongo.com.
4A.5 No sharing of mobile numbers. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent will not be shared with any third parties. Our service providers process it only to deliver messages on our behalf (Article 8).
4A.6 Mobile carriers are not liable for delayed or undelivered messages.
4A.7 WhatsApp. You can also message us on WhatsApp at the same US number. We use Your WhatsApp number, profile name and messages for the same purposes as in 4A.1, and we never message You there first for marketing. WhatsApp is provided by Meta under its own terms and privacy policy; Meta processes these messages to deliver them. Reply STOP there, or tell us, and we will not message You on WhatsApp again.
4A.8 Voicemail. We do not offer live phone support on our support numbers; when You call, You can leave a voicemail. The greeting tells You that Your message will be recorded. If You leave a voicemail, we process Your phone number, the date and time of the call, the recording and, where one is created, a written transcript of it, only to answer You and to log Your request as a support ticket. We reply in writing, by text message to the number You called from (where possible) or to an email address You give in Your message. Voicemail recordings are not used to recognise You or verify Your identity, and the AI training principles in Article 2.1A also apply to voicemails. Voicemails are kept for the period set for support messages in Article 6 and are received through our support chat and messaging providers (Article 8).
5. Legal Bases (GDPR / UK GDPR, where applicable)
| Purpose | Basis |
|---|---|
| Operating the account and delivering the Plan | Performance of a contract |
| Support and service messages | Performance of a contract |
| Taking payment, keeping records | Contract; legal obligation |
| Security, fraud and abuse prevention | Legitimate interests |
| Server access logs (Article 2.3A) | Legitimate interests (security and abuse prevention; complying with the obligations of Turkish law that apply to us) |
| Measuring and improving the Application | Legitimate interests |
| Marketing email to existing customers | Legitimate interests, with opt-out |
| Advertising cookies and measurement on our marketing site | Consent |
| Advertising cookies and personalised advertising on Free plan menus | Consent |
| Non-personalised or limited advertising on Free plan menus, recording consent choices, invalid-traffic detection | Legitimate interests (funding the Free plan; keeping advertising honest); legal obligation for consent records |
| Advertiser contact, billing and campaign data | Performance of a contract; legal obligation |
| Retention required by tax or accounting law | Legal obligation |
Where we rely on legitimate interests we have considered the impact on You and offer an objection route (Article 10A).
Where processing is based on consent, You may withdraw consent at any time; withdrawal does not affect processing carried out before it.
Türkiye (KVKK). Where Turkish law applies, we process on the grounds set out in Articles 5 and 8 of Law No. 6698, principally the performance of a contract and the legitimate interests of the data controller. Advertising cookies and personalised advertising on Free plan menus are based on explicit consent (Article 5/1); non-personalised advertising and invalid-traffic detection are based on legitimate interests (Article 5/2-f). Guests located in Türkiye are not served the Ad Provider's code: Free plan menus show them only MenuOnGo's own advertisements, served from our servers without cookies or identifiers and without personalisation, and no advertising data about them is transferred abroad.
6. How Long We Keep It
| Data | Retention |
|---|---|
| Account and Content, active account | For as long as the account exists |
| Account and Content, after termination | 30 days for export; then deleted from live systems |
| Backups | Deleted on the ordinary backup cycle, normally within 90 days |
| Support messages | 24 months |
| Menu visits | Single visits are added up into daily totals every four hours and then deleted; the daily totals hold no personal data. The visit times on the guest's device are deleted once no longer needed (Cookie Privacy Notice, Article 3.1) |
| Comments from guests | 365 days after they are sent, or earlier if You delete them |
| Server access logs | 1 year, unless a court or authority requires longer |
| Consent and opt-out records (Free plan menus) | Up to 12 months, after which the guest is asked again |
| Ad Provider cookies | For the lifetimes set by the Ad Provider and listed in the consent notice, typically up to 13 months; the Ad Provider's own retention applies to data it holds |
| Aggregated advertising reports | As long as needed for accounting, normally 10 years |
| Payment and tax records | As required by applicable tax law, normally 10 years |
| Records needed for a legal claim | Until the claim is resolved and the limitation period expires |
Inactive accounts may be terminated and deleted as set out in the User Agreement.
7. Payments
Payments are processed by a third-party payment provider acting as our Merchant of Record and authorised reseller, identified at checkout. The Reseller collects and processes Your payment details under its own privacy policy and is an independent controller for that transaction. MenuOnGo never receives Your card number or bank details. We receive only the fact of payment, the Plan purchased, the term, and the billing country for tax purposes.
8. Who Else Processes Data for Us
We use service providers ("sub-processors") who act only on our instructions and under contract. Categories:
| Category | Purpose |
|---|---|
| Cloud hosting and storage | Running the Application, storing Content |
| Content delivery network | Serving menu pages and images quickly |
| Bot protection / security check | Telling people from automated programs on our sign-up, sign-in, password reset and contact forms and on the menu comment form |
| Video hosting | Playing the how-to videos in our Help Center |
| Error monitoring | Recording errors in the service so we can fix them |
| Merchant of Record / payments | Taking payment, tax, invoicing |
| Email delivery | Service and marketing email |
| Support chat and AI assistant | Running the chat, generating the AI assistant's replies, managing tickets |
| Analytics | Understanding use of our own site and dashboard |
| Advertising measurement | Measuring our own advertising, on our marketing site only |
| Consent management platform | Showing the consent notice and privacy-choice links, and recording guests' choices (a Google-certified provider) |
| Text messaging (SMS), WhatsApp and voicemail | Receiving and sending support messages and voicemails (Article 4A) |
| AI processing | Reading uploaded menu files, structuring data, generating translations |
The current list of named sub-processors, with their location, is published on our Sub-processors page.
The Ad Provider (for example Google) is not our processor: it acts as an independent controller for the data it collects on Free plan menus (Article 1.3).
AI processing note. Menu files You upload may be processed by automated and AI systems in order to read and structure them. We select providers that do not use customer data to train their own general-purpose models. Do not upload personal data of third parties inside a menu file.
9. Where Data Is Processed
9.1 We operate from Türkiye. Your data may be stored and processed in Türkiye, the European Economic Area, the United Kingdom and the United States, depending on the provider.
9.2 Where data leaves the EEA or the UK, transfers are made using an appropriate safeguard — an adequacy decision where one exists, or the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable).
9.3 Where Turkish law applies, transfers abroad are made on the grounds permitted by Article 9 of Law No. 6698.
9.4 Data collected by the Ad Provider on Free plan menus may be processed in the United States and other countries where it operates, under the transfer safeguards the Ad Provider maintains.
10. Your Rights
Depending on where You are, You may have the right to: access a copy of Your data; correct inaccurate data; delete data; restrict or object to processing, including a general right to object to processing based on legitimate interests (Article 10A); port data in a machine-readable format; withdraw consent; and not be subject to a decision based solely on automated processing with legal or similarly significant effect (we do not make such decisions).
How to exercise them. Write to info@menuongo.com. We will respond within one month, or within any shorter period required where You are. We may ask You to verify Your identity. Exercising Your rights is free unless a request is manifestly unfounded or excessive.
If You are unhappy with our response, You may complain to your local supervisory authority — in Türkiye, the Personal Data Protection Authority (KVKK); in the EU, the authority in your country of residence; in the UK, the Information Commissioner's Office.
Guest requests. If You are a guest who viewed a menu and wish to exercise rights over data collected there, contact the business whose menu You viewed. They are the controller. If You contact us instead, we will pass the request to them. For advertising on a Free plan menu (Article 2.4), we are the controller — write to us directly. You can change or withdraw Your consent at any time through the "Cookie settings" link on the menu, or (in the US) opt out through the "Your Privacy Choices" link. For data held by the Ad Provider, You may also use the Ad Provider's own tools; for Google, see policies.google.com/technologies/partner-sites. We hold no advertising profile of any guest, so we will usually be unable to link records held by the Ad Provider to You.
10A. Your Right to Object (GDPR Article 21)
You have the right to object at any time, on grounds relating to Your particular situation, to processing of Your personal data that is based on legitimate interests (GDPR Article 6(1)(f)). We will then stop processing it unless we can demonstrate compelling legitimate grounds that override Your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.
Where we process Your data for direct marketing, You may object at any time without giving reasons, and we will no longer process it for that purpose.
An objection needs no particular form and can be sent to info@menuongo.com.
11. United States — State Privacy Rights
11.1 If You are a resident of California, or of another US state with a comprehensive privacy law, You may have the right to know what personal information we collect, to obtain a copy, to correct it, to delete it, and to be free from discrimination for exercising those rights.
11.2 Sale and sharing. We do not sell personal information for money. However, on Free plan Published Menus the Ad Provider's cookies collect identifiers (such as cookie IDs and IP address), internet activity (the menu page viewed and advertisements seen) and approximate location, and use them for advertising, including cross-context behavioural advertising. Advertising cookies on our marketing site do the same for visitors to menuongo.com. Under California law and similar state laws, this may be a "sale" or "sharing" of personal information. We make these disclosures to advertising providers, for advertising purposes only.
11.2A Your right to opt out.
- Use the "Your Privacy Choices" link shown on every Free plan menu and in the footer of menuongo.com. Opting out stops the sale and sharing of Your personal information from that browser; the Ad Provider will then show only non-personalised or restricted advertisements.
- A Global Privacy Control (GPC) signal sent by Your browser is treated as a valid opt-out for that browser, without any further step.
- We do not require You to create an account or give additional information to opt out.
11.2B We have no actual knowledge of selling or sharing the personal information of consumers under 16. Published Menus are general-audience pages and are not directed to children.
11.2C This Policy and the "Your Privacy Choices" link on each Free plan menu serve as our notice at collection.
11.3 The California exemption for business-to-business contact data expired on 1 January 2023. Business contact data is therefore treated as personal information under this Policy, and the rights above apply to it.
11.4 To exercise a right, write to info@menuongo.com with the subject line "US Privacy Request". An authorised agent may submit a request on Your behalf with written proof of authorisation.
12. Security
12.1 We use technical and organisational measures appropriate to the risk, including encryption in transit, hashed passwords, access control, logging, and restricted administrative access.
12.2 No system is completely secure. We do not guarantee that unauthorised access will never occur. Keep Your own copies of Your Content, as set out in the User Agreement.
12.3 If a breach occurs that is likely to result in a risk to people's rights, we will notify the relevant authority and, where required, the people affected, within the time limits applicable to us.
13. Children
13.1 The Application is for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 18 as an account holder.
13.2 Published Menus are public web pages with no age gate. Because of this, restrictions may apply to the display of tobacco and alcohol products, as described in the User Agreement.
13.3 Because guests of any age may view a Published Menu, advertisements on Free plan menus are never intentionally directed at children. We use the Ad Provider's controls to block alcohol, tobacco, gambling and other age-restricted categories, and treat Published Menus as general-audience pages. We do not knowingly allow personalised advertising to be served to children.
14. Links to Other Sites
The Application and Published Menus may contain links You add — to a delivery platform, a review page, a social profile or Your own website — and, on the Free plan, advertisements linking to advertisers' websites or apps. We are not responsible for the privacy practices or content of any site we do not operate.
15. Changes to This Policy
We may amend this Policy by publishing an updated version at menuongo.com. Material changes will be notified by email or in the dashboard. The amended Policy takes effect on publication.
16. Contact
POSSIAN YAZILIM ANONİM ŞİRKETİ
Gümüşpala Mah. İncebel Sokak No:25 İç Kapı No:6, 34320 Avcılar/İstanbul, Türkiye
Email: info@menuongo.com
Web: menuongo.com
Privacy questions, data requests and complaints should all go to the address above.