Privacy statement

This statement explains what personal data MyMenu collects, why we do it, and what rights you have. The data controller is Janthakun Tech (reg. no. 931 202 162), a Norwegian company. Contact: post@mymenu.no.

What information we process

• Account information: your email address, and name/profile picture if you log in with Google.
• Business information: what you enter yourself - business name, address, phone number, opening hours, photos and menu content. This is content you want to display publicly.
• Payment information: processed in its entirety by Stripe. We never store your card number - only your subscription status.
• Technical: necessary local storage in the browser for login and language selection.

What we use the information for

The processing basis is the agreement with you (GDPR art. 6-1 b) and our legitimate interest in operating the service securely (art. 6-1 f).

• Providing the service: login, menu pages and editing.
• To handle subscriptions and payments.
• To send you service emails: login links, welcome message and your QR code. We do not send advertising.

Guests visiting menu pages

Guests can read all menu pages without logging in. We do not use tracking cookies, ads or analytics tools aimed at guests. We only count the total number of views of each menu page per day - completely anonymously, without cookies and without being able to identify individuals. If a guest chooses a different language, the choice is only remembered locally in the guest's own browser.

Who we share information with

We never sell your information. The service is operated by these data processors/suppliers:

• Vercel – hosting of the website
• Supabase – database and login
• Stripe - payment and subscription
• Zoho Mail - Sending Email (EU Servers)
• Google - only if you choose Google login

Some suppliers may process data outside the EEA; then it takes place with a valid transfer basis such as the EU's standard contracts (SCC).

Storage time

We retain the information as long as your account is active. If you delete the account, or ask us to do so, the information is deleted without undue delay, unless the Bookkeeping Act requires certain payment information to be kept longer.

Your rights

You have the right to access, correct and delete your information, as well as data portability and to object to processing. Contact post@mymenu.no to exercise your rights. You can also complain to the Norwegian Data Protection Authority (datatilsynet.no).

Changes

In the event of significant changes to this declaration, we will notify you by e-mail or in the service. The current version is always on this page.