Privacy Policy

1. Who we are

OneTapMenu ("we", "us", or "our") provides a digital menu platform that allows restaurants to publish and share their menus via QR code. This Privacy Policy explains how we collect, use, and protect information in connection with our service available at this website.

2. Information we collect

We collect two categories of information:

• Restaurant account data: Name, email address, restaurant name, logo, menu content, and brand settings provided when setting up an account.
• Usage data: Basic analytics such as page views and QR code scans, collected in aggregate and not linked to individual users.

We do not collect personal data from restaurant guests who scan a QR code and view a menu. No accounts, no tracking, no cookies are required for guests.

3. How we use your information

We use the information we collect to:

• Operate and maintain the OneTapMenu service
• Display your menu to your customers
• Send you service-related communications (e.g. account updates)
• Improve and develop new features

We do not sell your data to third parties or use it for advertising purposes.

4. Data storage and security

Your data is stored securely using Supabase, a cloud database provider. We use industry-standard encryption in transit (HTTPS) and at rest. Access to your data is restricted to authorized personnel only.

5. Data retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, unless we are required to retain it by law.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

To exercise any of these rights, contact us at the email address below.

7. Cookies

The public menu pages (viewed by your guests) do not use cookies. The restaurant dashboard may use session cookies strictly necessary for authentication. We do not use tracking or advertising cookies.

8. Third-party services

We use Supabase for database and authentication services. Supabase's own privacy policy applies to data processed through their infrastructure. We do not share your data with any other third parties.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The "Last updated" date at the top of this page always reflects the most recent version.

10. Contact

If you have any questions about this Privacy Policy or your data, please contact us at: info@vordusgames.com