Privacy Policy

Overview

mymenu helps promoters share a professional menu, capture leads, and run team rotation links. This policy explains what we collect, why we use it, and the choices you have. It is written for real users — not as a legal contract.

Information we collect

• Account details: email, password (stored hashed), optional phone for SMS verification, display name, username, bio, and WhatsApp number you provide during onboarding or in settings.
• Lead and team form data: names, WhatsApp numbers, emails, and optional messages submitted on your public opportunity pages or team campaign links. This data is shown to the menu owner (and team admins for team leads).
• Uploaded content: images, PDFs, and videos you upload to opportunities or team branding (stored via Cloudflare R2 / Stream when configured).
• Usage analytics: page views and click counts on public menus, using hashed visitor identifiers — not sold to third-party ad networks.
• Payment references: when you upgrade, Constrapay Hub processes payment; we store plan status and payment references, not full card numbers.

How we use your information

• Authenticate you and complete email/phone verification (OTP).
• Publish your public menu and deliver leads to your dashboard.
• Send transactional email (welcome, new lead, publish confirmations) via Resend when configured.
• Rotate team campaign traffic fairly among active members.
• Improve reliability, prevent abuse, and respond to support requests.

WhatsApp and third parties

WhatsApp buttons and links open WhatsApp (Meta) outside mymenu. We do not control WhatsApp's privacy practices. Email delivery uses Resend; file hosting uses Cloudflare when enabled. Each provider has its own terms.

Retention and security

We keep account and lead data while your account is active and as needed for legitimate business purposes. Passwords are hashed; secrets and API keys stay server-side. No system is perfectly secure — report concerns to our support email below.

Your choices

You can update profile details in the dashboard, export or follow up on leads you receive, and request account deletion by contacting support. Public pages stop collecting new leads when you unpublish opportunities or deactivate team links.