Privacy policy

1. Who the controller is

The data controller is Mattia Mellone, sole trader, VAT no. IT07993850721, Via Martin Luther King 19 int. 10, 70124 Bari (BA), Italia. For any question or request about your data, write to privacy@menudetto.com.

2. If you visit the website

We count visits with Cloudflare Web Analytics: page views, the page you came from, country, browser and device type, loading times. The tool uses no cookies, stores nothing on your device and does not recognise you from one visit to the next: we only see totals. It does not run on the menus published by venues, nor on the pages opened from an email with a code in the address (email preferences, new password, team invitation). Legal basis: our legitimate interest in knowing which pages are useful (art. 6.1.f GDPR).

The free tools — allergen table, food cost calculator, QR code generator — work in your browser: what you type stays on your device and never reaches us. The “Dish descriptions” tool, instead, sends the dish name and description to our server to write the suggestions with artificial intelligence: we do not save them in an archive, and the result stays at most 30 days in a temporary cache that avoids repeating the same request.

“First 20 founders” form: if you leave your email we record the address, the page language, the date and your consent. We need them to hold your spot, to send you the email about the year of Pro (or the one telling you the spots are gone) and to recognise you when you create the account with the same email, so the year of Pro switches on by itself. Holding your spot is a step you ask for before the contract (art. 6.1.b GDPR); we send the email only with your consent (art. 6.1.a GDPR and art. 130 of the Italian Data Protection Code), which you can withdraw at any time from the link at the bottom of the email or by writing to privacy@menudetto.com.

3. If you create an account and use the app

• Account: email, name (optional), password (stored only in encrypted form, as a hash), language, the date you accepted the terms and your email choices, with their dates. If you sign in with Google or Apple, the provider gives us the identifier of your account with them and your email; we never see your password.
• Your venue and menus: venue name and city, the public information you enter (address, opening hours, contacts), menus, dishes, prices, descriptions, allergens, photos and logo, style, published versions and QR codes.
• Assistant, chat and voice: the messages you write to the assistant and the changes it proposes stay in the conversation, which is deleted by itself after 30 days without messages; the changes you confirm stay in the menu and its history. The audio you dictate is only used to transcribe it: we send it to the transcription service and do not keep it.
• Electronic invoices (Pro plan): if you upload an invoice XML we keep the supplier's business name and VAT number and the product lines with their prices. We do not read the supplier's IBAN, phone number or address, and we do not keep the file. An upload you never confirm is deleted by itself after 30 days.
• Team: the email of the people you invite and the role you give them. An invitation expires after 7 days.
• Pro subscription: payment is handled by Stripe. We neither see nor store your card details: we keep the Stripe customer identifier and the subscription status (plan, renewal, cancellation).

This data is needed to provide the service you asked for (art. 6.1.b GDPR); payment data also to meet tax obligations (art. 6.1.c).

Where you came from: when you create the account we record where you came from — the invitation code, if you followed an invitation link, or the campaign in the address (utm parameters) or the name of the site you came through, if they appeared during the same visit. It helps us understand which channels bring restaurateurs, based on our legitimate interest (art. 6.1.f); you can object by writing to privacy@menudetto.com. The invitation code is also used to give the month of Pro to you and to the person who invited you.

Security: to protect the service we record technical data about requests (date and time, address called, outcome, errors, account identifier) and use the IP address for anti-abuse limits (art. 6.1.f).

4. The emails we send you

Always on: welcome, security and password, linked sign-ins, account deletion confirmation, team invitations, subscription and payments, founders, and the menu files you ask for when you publish. They are needed for the service and the contract (art. 6.1.b) and cannot be switched off.

Menu alerts and Reminders: the consequences of something you did (the PDFs after an import, allergens still to be verified, the monthly summary of an online menu) and nudges about work you started. They are on until you switch them off, based on our legitimate interest in helping you get the most out of the service you chose (art. 6.1.f): you switch them off in one tap from your profile or from the link at the bottom of every email.

Blog updates: an email with the new articles, only if you asked for it (consent, art. 6.1.a GDPR and art. 130 of the Italian Data Protection Code). It is off until you switch it on, and you can switch it off whenever you like, from your profile or from the link at the bottom of the email.

Reminders and Blog updates only arrive between 9 am and 7 pm (Italian time), never on Sundays, and at most two a week in total.

5. If you read a published menu

People who scan a venue's QR code do not sign up and give us no data that identifies them. We count anonymously how often the menu and the dishes are opened, the hearts and the lists prepared at the table: only totals per dish, which the venue sees in the app. The list and the hearts live in the memory of the browser tab and disappear when you close it. Published menus have no cookies and no third-party measurement.

If you write to segnalazioni@menudetto.com to report content on a menu, we use your name, your email and what you tell us only to assess the notice, reply to you and decide; we tell the venue what was reported, and your name only where strictly necessary. We do this to meet a legal obligation (art. 6.1.c GDPR and Regulation (EU) 2022/2065) and keep the correspondence for as long as it takes to handle the notice and any complaint.

6. The data of the venue's staff and suppliers

When a venue uses Menudetto with other people's data — the email addresses of the staff it invites to the team, the suppliers named in the invoices it uploads — the controller of that data is the venue. Menudetto processes it on the venue's behalf, as a processor (art. 28 GDPR), under the conditions set out in the Terms of service. If you are one of these people you can contact the venue; if you write to us, we pass your request on to the venue.

7. Cookies and browser storage

The website uses no profiling cookies and no third-party cookies: that is why we do not ask for consent with a banner. The cookies that may be set are technical:

• md_src — we set it only if you arrive from an invitation link: it holds the invitation code and lasts 90 days, so the invitation still counts if you create the account another day. We never set it in any other case, and an md_src from before 25 September 2026 with different content is deleted on your first visit. It is a technical cookie: it serves the invitation programme you chose by opening the link, so it needs no consent (art. 5.3 of the ePrivacy Directive and art. 122 of the Italian Data Protection Code); we use the code to give you the month of Pro that comes with the invitation (art. 6.1.b GDPR).
• NEXT_LOCALE — remembers the website language you chose, when it differs from your browser's; it is deleted when you close the browser.

In the browser's storage, which is not a cookie, we keep: the app session, so you stay signed in for up to 7 days (it is cleared by “Sign out”); the app preferences, such as the selected menu; the open conversation with the assistant, in the tab; what you type in the free tools; for diners, the list and hearts of the tab. Cloudflare Web Analytics uses neither cookies nor browser storage.

8. The providers that process data on our behalf

• Microsoft Azure: servers, database, storage of photos and logos, logs, email delivery (Azure Communication Services) and artificial intelligence (Azure OpenAI Service: understanding commands, allergen proposals, translations, speech transcription, descriptions, reading photos of the menu). Data is stored in the European Union; requests to the artificial intelligence may also be processed by Microsoft in other countries, and Microsoft does not use this content to train its models.
• Stripe: payment of the Pro subscription.
• Cloudflare: the website's DNS, routing of the email you send us and visit counting (Web Analytics).
• Google: sign-in with Google, if you choose it, and the mailbox (Gmail) where we read the emails you send us.
• Apple: sign-in with Apple, if you choose it.

For sign-in with Google or Apple, what happens on their service is governed by their own privacy notices. We do not sell data and do not use it for advertising.

9. Data outside the European Union

Microsoft, Stripe, Cloudflare, Google and Apple belong to groups based in the United States, and Azure's artificial intelligence may process requests in other countries. When data leaves the European Union, the transfer relies on the European Commission's adequacy decision for companies in the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the Commission (arts. 45 and 46 GDPR).

10. How long we keep data

Account and content stay as long as the account is active. When you delete it (Settings → Delete my account) we immediately delete from the app the account, the venues, menus, versions, QR codes, photos and conversations, and the published menus stop working. If a venue has other team members, it passes to one of them instead of being deleted.

Technical backup copies disappear by themselves: the database ones within 35 days, those of photos and files within 14 days. Technical logs are deleted after 90 days. Payment invoices stay with Stripe to meet tax obligations.

The email left in the founders form stays as long as the programme needs it, or until you ask us to delete it. The emails you send us are kept for as long as it takes to answer you.

11. Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its processing, receive it in a machine-readable format and object to processing based on legitimate interest (arts. 15–22 GDPR). Where processing is based on consent you can withdraw it whenever you like, without affecting what was done before.

In the app you export your data (Settings → Export my data), delete the account and choose your emails. For anything else write to privacy@menudetto.com: we reply within one month. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of your country.

Menudetto makes no automated decisions with legal effects on you: what the artificial intelligence proposes only goes into the menu once you confirm it.

12. Changes

If we change this notice we update the date at the top of the page. The Italian version is the binding one; the other languages are courtesy translations.