Privacy Policy
Last updated
1. Who we are
MenuLume is operated by Neldra Technologies LLC (“we”). We are the controller of the personal data described here. Contact us at info@menulume.com. This policy covers restaurant account holders, guests who view a published menu, people who request a menu preview, people who contact us, and restaurants we contact.
2. What we use information for, and why we may
- Providing the service to account holders — your account, restaurants, menus, publishing, sign-in links and email about your account. Basis: performing our contract with you.
- Processing the content you submit when you ask us to extract a menu, enhance a photo, produce a video clip or translate a menu. Basis: performing our contract with you.
- Billing you for a subscription or a pack, and keeping the records the tax authorities require — your restaurant’s business address and, if you give one, your business tax number; the country of the card you pay with. Basis: performing our contract with you, and our legal obligations.
- Statistics about how published menus are used. Basis: our legitimate interest, and the restaurant’s, in understanding how menus are used, without identifying anyone.
- Site analytics, security, abuse prevention and service logs. Basis: our legitimate interest in running a reliable, secure service.
- Building a menu preview someone requests, and emailing them its link if they give an address. Basis: their request.
- Answering messages you send us — by email, through our contact form or chat, or by text message. Basis: your request.
- Contacting restaurants about MenuLume (section 5). Basis: our legitimate interest in reaching the businesses the service is for.
- Answering an enquiry you send us through the Culinartist enquiry form on the pricing page — your name, email address and the message. Basis: your request.
- Meeting legal obligations, where they apply.
An email address is required to hold an account. Nothing else described here is required.
3. Guests
A published menu page sets no cookies and loads nothing from third parties. While you use it, it records a temporary session identifier that lasts only while the page is open, whether you arrived by QR code or by link, whether your device is a phone, the page language, which parts of the menu you view or open, and what you type into the menu’s search. It does not record your IP address, your name, or your browser details. Your list of picks is kept in your own browser; marking a pick is recorded like the other interactions above. The restaurant sees this information only as totals.
4. Menu previews
When you search for a restaurant on our landing page, we send what you typed and an approximate, city-level location derived from your IP address to Google Maps Platform, so the suggestions are near you; we do not keep that location. When someone asks us to build a preview of a restaurant, we use the restaurant’s public listing from Google Maps Platform and the restaurant’s own website. Google’s privacy policyapplies to that listing data. We use Google’s listing content to build the preview and do not keep it afterwards, apart from the listing’s identifier. If you give us an email address to receive the preview’s link, we use it for that purpose. A preview that no one has claimed or asked to be emailed expires after 7 days. If you represent a restaurant and want a preview removed, email info@menulume.com.
5. Restaurants we contact
We email restaurants about MenuLume using business contact details we find in public listings and on restaurant websites: the business name, a contact name where one is listed, and an email address. We do this under our legitimate interest in reaching the businesses the service is for. Every such email includes a way to opt out, and an opt-out is honoured permanently.
6. Who receives it
We share personal data only with the providers we need to run the service, and with authorities where the law requires:
- hosting and database providers in the United States;
- an email delivery provider, for sign-in links and the emails described in this policy;
- a text-message delivery provider, for the chat and contact notifications described in this policy;
- a payment processor, which holds your card details on our behalf; we never see the full card number;
- AI model providers, which receive the content you submit for extraction, enhancement, video or translation;
- infrastructure providers that fetch the web pages you ask us to import;
- a cookieless site-analytics provider in the EU (section 9);
- Google, when you sign in with Google (we receive your email address and basic profile) and when a menu preview uses Google Maps Platform (section 4).
We do not share, sell or rent phone numbers or text-message opt-in consent with third parties or affiliates for marketing or promotional purposes.
7. Where it goes
We are based in the United States and our providers store data there. Where we handle personal data from the EU or the UK, transfers rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified under it, and otherwise on Standard Contractual Clauses.
8. How long we keep it
- Account and restaurant data: while your account exists, and for up to 30 days after a verified deletion request; backups are purged within a further 30 days.
- Billing records, including invoices and the address they were issued to: seven years, as tax law requires.
- Published menus: until you unpublish them.
- Photos and videos: until you remove them and no published menu still shows them.
- Files and web pages you import from: deleted once the import is applied or discarded.
- Guest statistics: individual events for 12 months; totals indefinitely.
- Menu previews: 7 days unless claimed or attached to an email address.
- Messages you send us — by email, through our contact form or chat, or by text — and the network address and approximate location they came from: kept as business records until you ask us to delete them.
- Outreach contact details: until you opt out.
- Culinartist enquiries sent through the form on the pricing page: in our mailbox until the conversation ends, then deleted.
10. Your rights
You can ask us to access, correct, delete or export your personal data, to restrict or object to our processing of it, and, where we rely on your consent, to withdraw it. Email info@menulume.com; we respond within one month. You can also complain to a data-protection authority. We do not sell personal information. If we change this policy we post the new version with a new date, and we email account holders about material changes.