Privacy Policy
Plain language, no legal fog. This is exactly what we do with your data.
1. Data we collect
We collect what you enter at signup: restaurant name, email, phone number. We store what you create inside the platform: categories, products and their images, branches, tables and branding settings. When a customer orders from your menu we store their phone number, delivery address and order contents — acting as a data processor on your behalf.
2. How we use it
Only to run the service: displaying your menu, processing orders, issuing your subscription invoices and answering support tickets. We also count daily menu visits in aggregate (a counter only, no individual tracking) to show you your statistics.
3. Third parties
We never sell or rent your data. We rely on infrastructure providers only: Supabase for database and authentication, ImageKit for image storage, and Vercel for hosting. Each processes data under contract and never for their own purposes.
4. Security
Passwords are hashed and never visible to us. All traffic is encrypted over HTTPS. Access to each restaurant's data is enforced by row-level security policies in the database, so no restaurant can reach another's data. Staff members you add see only what their role permits.
5. Cookies
We use strictly necessary cookies only: a session cookie to keep you signed in, your language preference, and the sidebar collapsed state. No advertising cookies and no cross-site tracking.
6. Retention and deletion
We keep your restaurant's data as long as your account exists. On a deletion request we remove your restaurant data, menu and images within 30 days, while retaining issued invoices for the period required by accounting law. You may request a copy of your data at any time.
7. Your rights
You may access your data, correct it, request its deletion, object to its processing, and obtain it in a portable format. To exercise these, contact us and we will respond within 30 days.
Questions about privacy?
Write to info@zeanto.com