Privacy Policy

This privacy policy explains which personal data QMenu processes, why, and for how long. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

For any privacy question, contact us at the email address above.

2. Guests opening a menu

Guests need no account and no app. Our menus set no cookies of their own and use no tracking or advertising services.

• View statistics: we count how often a menu and its dishes are viewed, so the restaurant can see its most popular dishes. We store only the restaurant, the dish and the time — no IP address and nothing that identifies you.
• Favorites and cart are kept only in your own browser's storage (localStorage) and are never sent to us.
• Ordering and paying at the table (only if the restaurant uses it): we store the dishes ordered, your notes and the table, so the restaurant can serve your order. You enter card details directly with our payment provider Stripe; we never receive them. Only when you pay does Stripe load its payment form, which may set its own cookies for fraud prevention (see stripe.com/privacy).

The restaurant is responsible for its own menu; we process order data on its behalf.

3. Restaurants and their staff (customer accounts)

• Account data: name, email address, password (stored only as an encrypted hash) and role — so you can sign in and manage your menu.
• Restaurant data: name, address, phone, menu, and the photos and 3D models you upload.
• Billing: subscriptions, invoices and payments run through Stripe. We store only the Stripe customer and subscription IDs and the subscription status — never card details.
• Emails: we send emails to the address given for password resets and staff invitations.

The legal basis is the performance of our contract with your restaurant (Art. 6(1)(b) GDPR) and our legal record-keeping obligations.

4. Cookies

We use one strictly necessary cookie: the sign-in cookie for the dashboard. It is set only when you sign in and removed when you sign out. There are no analytics or marketing cookies, which is why there is no cookie banner. The only exception is Stripe's payment form when paying at the table (see above).

5. Hosting and server logs

The website runs on our own virtual server at Hostinger International Ltd. (Cyprus), located in: [server location — to be added]. Fonts, images and videos are served from this server; nothing is loaded from Google or other third parties. For security, the web server logs the IP address, time and requested address of each visit to detect attacks and errors. These logs are deleted after 14 days at the latest.

6. Sharing with third parties

We never sell data. We share it only with service providers we need to run the service:

• Hostinger International Ltd. — server and storage
• Stripe Payments Europe Ltd. (Ireland) — payments and invoices. Stripe may transfer data to the USA, covered by standard contractual clauses or its certification under the Swiss-U.S. Data Privacy Framework.
• an email delivery provider — only for the system emails above

Beyond that, only where the law requires it.

7. How long we keep data

We keep account data and menus while your restaurant uses QMenu and delete them no later than 90 days after the contract ends, or sooner on request. Invoices and accounting records are kept for 10 years as Swiss law requires. Backups are overwritten after 14 days.

8. Your rights

You can ask at any time what data we hold about you, and have it corrected, deleted, or handed over in a common format. You can object to its processing. Just email us at the address above. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a supervisory authority in your EU country.

9. Security

All connections are encrypted with HTTPS, passwords are stored only as hashes, and access to the server is restricted to us.

10. Changes

We update this policy when our service changes. The version published here always applies.