Who this policy applies to
This Privacy Policy explains how Menyra processes personal information when you visit the website, create or use an account, manage stores and digital menus, contact support, use billing features, or sign in with an external authentication provider.
Information we process
- Account information such as your email address, account role, verification status and security settings.
- Store and menu information you choose to provide, including business details, menu content, images and related configuration.
- Authentication and security information such as login events, session-security state, remembered sign-in records and abuse-prevention records.
- External sign-in information from Google, including the provider account identifier, provider email, provider display name and the time of the last successful external authentication.
- Billing and subscription information required to manage your Menyra plan. Payment card details are handled by Stripe and are not stored directly by Menyra.
- Technical information required to operate and protect the service, such as request metadata, security logs, language and interface preferences.
Google sign-in
If you choose Google sign-in, Menyra receives only the account information required for authentication. OAuth access tokens are used temporarily during the callback and are not stored by Menyra.
Menyra uses the provider-specific account identifier as the authoritative external identity. An email match by itself is not used to silently link or authenticate an existing Menyra account.
How we use information
- To create, authenticate and secure your Menyra account.
- To provide stores, digital menus, QR access and related product features.
- To manage trials, subscriptions, billing and service access.
- To respond to support, privacy and account requests.
- To detect abuse, investigate failures and protect the service.
- To meet legal, accounting or regulatory obligations where applicable.
Service providers
Menyra may use service providers where necessary to operate the service, including hosting and infrastructure providers, email delivery, Stripe for payment processing, and Google when you choose Google authentication.
These providers process information under their own terms and privacy notices where they act independently, and under applicable contractual safeguards where they process information on behalf of Menyra.
Cookies and local storage
Menyra uses essential browser storage and cookies for authentication, session security, language, appearance and privacy preferences. See the Cookie Policy for more detail.
Retention
Personal information is kept only for as long as reasonably necessary for the purposes described in this policy, account operation, security, dispute handling and legal obligations. Archived or backup copies may remain for a limited period before being removed through normal retention cycles.
Your privacy rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection regarding your personal information. You may also withdraw consent where processing is based on consent.
For account and personal-data deletion, use the Data Deletion Instructions page or contact Menyra using the legal contact shown on this page.
Security
Menyra uses technical and organizational safeguards including access controls, server-side validation, CSRF protection, secure session handling, privacy-conscious logging and provider-specific OAuth state validation. No internet service can guarantee absolute security.
Changes to this policy
This policy may be updated when Menyra changes its services or legal obligations. The effective date shown on this page identifies the current version.