Privacy Policy

GetMenyu provides restaurants, shops and hotels (“businesses”) with a digital menu, a point of sale, ordering and related tools. This policy explains what information we handle, why, and the choices people have. Questions: chkhoury00@gmail.com.

Who is responsible for what

For the accounts businesses open with us, GetMenyu decides how that information is used. For the information a business collects about its own customers through GetMenyu (orders, phone numbers, messages), the business decides how it is used and GetMenyu processes it on the business’s behalf.

Information we handle

• Business accounts: names, email addresses, phone numbers and passwords (stored hashed) of owners and staff; business details, menus, prices, stock and settings.
• Orders and sales: items, amounts, payment method, receipts and the staff member who recorded them.
• Customers of a business: when a customer orders, reserves or verifies a phone number, the name and phone number they give, delivery addresses, and their order history with that business.
• WhatsApp: when a business connects its own WhatsApp Business number to GetMenyu through Meta’s signup, we receive the identifiers of its WhatsApp Business Account and phone number and an access token that Meta issues for that account. We store the token encrypted. Messages that customers send to the business’s WhatsApp number, and messages the business sends through GetMenyu, are stored so the business can read and answer them in its inbox. Photos, voice notes and files stay with Meta and are fetched only when the business opens them.
• Menu visits: anonymous visit counts and the channel a visit came from (for example a QR code), used to show a business how its menu is used.

How we use it

• To run the service: show menus, take and record orders, send verification codes, order updates and reservation notices, and let businesses answer their customers.
• To keep accounts secure and prevent fraud and abuse.
• To support businesses and improve the service.

We do not sell personal information, and we do not use customers’ messages for advertising.

Who we share it with

• Meta (WhatsApp): to deliver WhatsApp messages from a business’s number or from GetMenyu’s own number, under Meta’s terms.
• Service providers that host and run GetMenyu for us: cloud hosting and storage, email delivery, payments (Whish) where a business uses them, and AI providers for features a business turns on (for example reading a menu photo). They may use the information only to provide their service to us.
• When the law requires it.

How long we keep it

Business and sales records are kept while the business’s account is open and as long as needed for its accounting. The text of WhatsApp messages is deleted after 180 days; the record that a message was sent is kept. When a business disconnects its WhatsApp number, we delete the access token at once.

Your choices and rights

Businesses can edit or delete their data from the dashboard, and can disconnect WhatsApp at any time from Settings → WhatsApp or from Meta’s Business settings. Customers of a business can ask that business, or us, to see or delete what is held about them. See Data deletion.

Security

Data is encrypted in transit. Passwords are hashed, and third-party secrets such as WhatsApp and payment credentials are encrypted at rest. Access is limited by role within each business.

Changes

We will update this page when our practices change, and show the date of the last change above.