Privacy Policy
Effective date: 6 July 2026
This Privacy Policy explains how dMenu ("dMenu", "we", "us") collects, uses, and protects information when a restaurant ("you", the "merchant") uses our platform, and when a diner ("customer") places an order through a restaurant's dMenu page. This policy applies only to dMenu and does not extend to other products or services.
1. Information we collect
For restaurant accounts, we collect:
- Restaurant name, owner name, email address, and password (stored securely and never in plain text).
- Menu content you upload, such as categories, items, prices, and photos.
- Table and QR code configuration, subscription plan, and billing cycle.
For customers placing an order, we collect:
- WhatsApp / mobile number, used to verify orders and send status updates.
- Order details — items, quantities, table, and order history.
2. How we use information
- To operate the digital menu, QR ordering, and kitchen display.
- To send order confirmations, status updates, and verification codes over WhatsApp.
- To send restaurant owners daily sales reports and subscription alerts.
- To generate receipts and printable paper menus.
- To improve reliability, security, and the features we offer.
3. Third-party services
We rely on a small number of trusted providers to run dMenu:
- Supabase — our database, authentication, and file storage provider.
- WhatsApp messaging API — used to deliver order updates and verification codes to the phone number provided.
These providers only receive the data necessary to perform their function and are not permitted to use it for their own purposes.
4. Data sharing
We do not sell personal data. A customer's order and phone number are shared only with the specific restaurant they ordered from, so that restaurant can fulfil the order and send updates.
5. Data retention
We retain account and order data for as long as the restaurant account is active, and for a reasonable period afterwards to comply with legal, tax, and accounting obligations. Restaurants can request deletion of customer data they no longer need to retain.
6. Your rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us using the details below. Restaurant owners can manage most of their own data directly from the dashboard.
7. Cookies
We use essential cookies to keep you signed in and to remember basic preferences. We do not use third-party advertising cookies.
8. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above.