Privacy Policy

Last Updated: September 20, 2026

This Privacy Policy explains how we collect, use, store, protect, and otherwise process personal information and other data when you visit or use qrmenusolutions.com, create or manage an account, use our restaurant management dashboard or application, upload or manage restaurant menus and images, scan or use a QR Menu Solutions-powered restaurant menu, communicate with us, purchase or subscribe to our Services, or otherwise interact with us.

1. Our Role and Scope

QR Menu Solutions provides technology that enables restaurants to create and manage digital menus that customers can access by scanning QR codes.

Our Services have two primary groups of users:

Restaurant users

These include restaurant owners, managers, authorized staff members, and other people who use QR Menu Solutions to manage a restaurant's digital menu.

Restaurant menu visitors

These are people who scan a restaurant's QR code and view its digital menu.

A restaurant may provide us with information about its business, employees, menu, food items, images, and other content.

For restaurant menu content and restaurant-specific menu operations, the restaurant is generally responsible for determining the purposes and means of processing its menu data. QR Menu Solutions provides the technology and acts as a service provider/processor where applicable under the law governing the relationship.

2. Information We Collect

We collect information necessary to provide, secure, improve, and operate our Services. The information we collect depends on how you interact with QR Menu Solutions.

2.1 Restaurant and Account Information

When a restaurant creates an account or uses our Services, we may collect:

• owner's name
• restaurant/business name
• email address
• phone number
• full business address
• city, state/province, country, and postal code
• account and authentication information
• restaurant logo
• restaurant photographs
• business information
• authorized staff names
• information necessary to provide staff access to the restaurant management dashboard
• subscription and plan information
• payment-related information provided through our payment providers
• communications between you and QR Menu Solutions
• information provided when requesting support

We may use email addresses or phone numbers to authenticate users through one-time passwords (OTPs), where supported.

3. Restaurant Menu and Business Data

Restaurants may upload existing menus, photographs, PDFs, documents, or other materials to our Services. This may include menu photographs and PDFs, food names and descriptions, prices, food categories, vegetarian/non-vegetarian information, dietary information where provided, food images, restaurant photographs and logos, availability information and schedules, restaurant address and contact information, table or QR-code information, menu configuration and themes, and other information necessary to create and operate the digital menu.

We process this information to provide the digital menu and restaurant management technology requested by the restaurant.

4. Menu Digitization, AI and Automated Processing

Restaurants may provide photographs, PDFs, or other menu materials so that we can convert them into structured digital menu information. Our employees may review and process these materials.

We may use artificial intelligence (AI), optical character recognition (OCR), image processing, and related technologies to assist with reading menus and producing structured menu data quickly.

Depending on the workflow, menu materials or relevant portions of them may be processed by third-party AI providers, including OpenAI/ChatGPT and Google Gemini. These services are used to assist with menu reading, extraction, structuring, and related processing. We may use additional AI or OCR providers in the future where reasonably necessary to operate or improve the Services.

We do not intentionally use restaurant menu information or personal information to train third-party AI models unless we separately disclose such use and obtain any consent or authorization required by applicable law.

5. Information Collected From Restaurant Menu Visitors

A person can generally view a QR Menu Solutions-powered restaurant menu without creating an account or providing their name, email address, or phone number.

When a person scans a restaurant QR code and opens a menu, QR Menu Solutions does not intentionally collect the visitor's IP address, device identifier, browser information, operating system, or similar device-identifying information for menu-visit analytics.

For purposes of the restaurant's menu-visit allowance and service analytics, we primarily record the number of menu visits or equivalent usage counts. These counts are used to operate the pricing model and provide restaurant usage analytics.

Temporary session/local-storage functionality may be used on the visitor's device to allow the visitor to create a temporary list of selected food items. This local functionality is not intended to create a permanent customer account.

6. Temporary Local Menu Lists

QR Menu Solutions may allow restaurant visitors to select food items and create a temporary list on their own device so they can show that list to restaurant staff.

This information is intended to remain locally on the visitor's device rather than being permanently stored in our server database.

Depending on the implementation, the local list may be removed on a subsequent scan or may automatically expire or become invalid after approximately one to two hours.

Users should not rely on this temporary feature as permanent storage.

7. Menu Visit Analytics

We collect menu-usage counts primarily to operate the QR Menu Solutions pricing model and determine the number of menu visits attributable to a restaurant.

We may also use aggregate usage information to:

• keep our infrastructure reliable and responsive
• monitor overall system usage and capacity
• optimize server resources and performance
• understand product adoption and usage patterns
• evaluate and improve our pricing model
• develop new products and features
• identify useful features or services for restaurants based on their usage
• improve the overall QR Menu Solutions experience

We may provide restaurants with usage analytics relating to their own menus, such as the number of menu visits and other business-level statistics generated from the Service.

8. Analytics Services

We use Google Analytics for website and product analytics where applicable. Google Analytics may process information in accordance with Google's own policies and our configuration of the service.

We also use Supabase and related infrastructure analytics for operational monitoring, database/realtime functionality, storage, account management, performance, and service optimization.

We do not use the menu visitor analytics described in Section 5 to build individual visitor profiles or to identify menu visitors personally.

Where applicable law requires consent for non-essential analytics technologies, we will request consent before using them.

9. Cookies and Similar Technologies

We use cookies, local storage, session storage, pixels, SDKs, and similar technologies where necessary to operate and secure the Services.

Essential technologies

These may be used for authentication, security, maintaining login sessions, remembering necessary settings, providing requested functionality, and maintaining temporary local menu functionality.

Analytics technologies

Where enabled, analytics technologies may be used to understand website usage, measure performance, diagnose problems, and improve our Services.

Marketing technologies

Where we use marketing cookies or similar technologies, we will implement the appropriate consent and opt-out mechanisms required by applicable law.

You may control cookies through your browser settings. Blocking essential technologies may prevent portions of the Services from functioning correctly.

10. How We Use Information

Providing the Services

• create and maintain accounts
• authenticate users
• provide restaurant dashboards
• create and display digital menus
• process menu uploads
• digitize menus
• manage food items and availability
• generate and operate QR menus
• provide usage analytics
• process subscriptions and payments
• provide support
• otherwise provide requested functionality

Security and reliability

• authenticate users
• prevent unauthorized access and abuse
• protect our systems and infrastructure
• monitor service performance
• investigate security incidents
• enforce our agreements

Product and business improvement

• understand aggregate usage
• optimize infrastructure
• improve menu digitization
• improve AI/OCR processing
• develop features and products
• evaluate pricing and usage models
• provide relevant additional products or services to restaurants

Communications

We may send account, security, service, billing, support, product, and other transactional communications related to the Services.

Marketing

Subject to applicable law, we may send promotional emails, WhatsApp messages, SMS, product announcements, special offers, educational content, and other marketing communications. You may unsubscribe from promotional communications using the available unsubscribe mechanism or by contacting us.

11. Restaurant Analytics and Business Insights

Restaurants may receive analytics relating to their own menus, including menu visit counts and other usage statistics relevant to their Service.

We may also use aggregate usage information internally to keep the platform fast and reliable, understand demand, improve pricing, develop products, and suggest relevant services to restaurants.

We do not sell personal information. We do not share personal information with third parties for their independent advertising purposes.

12. Sharing and Service Providers

We do not sell personal information and do not intentionally share personal information with third parties for their independent advertising or marketing purposes.

However, information may be processed by service providers where necessary to operate the Services. These may include:

• Supabase for database, authentication, storage, realtime services, analytics, and infrastructure
• Google Analytics for website and product analytics
• OpenAI/ChatGPT for AI-assisted menu reading and structured menu generation
• Google Gemini for AI-assisted menu reading and structured menu generation
• Lemon Squeezy, Stripe, Razorpay, and PayU for payment and subscription processing, as applicable
• hosting, cloud, security, email, OTP, communications, customer-support, and other infrastructure providers
• other providers we may reasonably adopt to provide or improve the Services

Service providers are permitted to process information only as necessary for their contracted services and subject to applicable agreements and legal requirements.

13. Restaurant-Controlled Data

The restaurant is generally the controller/business responsible for its own restaurant menu and restaurant-provided business information. QR Menu Solutions provides the technology used to store, process, display, and manage that information.

Restaurants are responsible for ensuring that they have the necessary rights, permissions, notices, and lawful basis to provide information to QR Menu Solutions and to use the information in accordance with applicable law.

Restaurants should not upload information that they are not legally permitted to provide to us.

14. Restaurant Staff Information

A restaurant may add authorized staff members to its dashboard. We may process staff names and authentication/access information needed to provide dashboard access, security, and administration.

Restaurant administrators are responsible for ensuring that staff members are appropriately authorized to access the restaurant account.

15. Payment Information

Payments may be processed by third-party payment providers including Lemon Squeezy, Stripe, Razorpay, and PayU, depending on the applicable market and payment flow.

We generally do not store complete payment-card numbers or CVV/security codes on our own servers. We may receive transaction information such as payment status, transaction identifiers, subscription identifiers, amount, currency, billing country, customer email, payment method type, invoice information, and refund information.

16. International Data Transfers

QR Menu Solutions is operated from India and may serve customers internationally. Information may therefore be processed in countries other than the country in which you live.

Where applicable law requires safeguards for international transfers, we will use appropriate legal mechanisms and safeguards, which may include adequacy decisions, standard contractual clauses, contractual protections, appropriate technical and organizational measures, or another legally recognized mechanism.

17. Data Security

We take reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, accidental loss, destruction, alteration, misuse, and unlawful processing.

Measures may include encrypted connections, access controls, authentication, role-based permissions, secure infrastructure, database security policies, logging, monitoring, backup procedures, webhook verification, security reviews, and restricted employee access.

No internet-based service can guarantee absolute security.

18. Employee Access

Access to restaurant and account information is limited to employees and authorized personnel who need access to perform their responsibilities.

Authorized employees may access uploaded menu materials when necessary to digitize menus, correct menu information, provide support, troubleshoot issues, maintain the Service, or perform authorized operational functions.

19. Data Retention

We retain information for as long as reasonably necessary to provide the Services, maintain accounts, fulfill contractual obligations, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, and maintain legitimate business records.

Restaurant data is not automatically deleted solely because a subscription ends.

A restaurant may specifically request deletion of its account and associated data.

Certain information may need to be retained where required by law or necessary for legal claims, security, fraud prevention, financial records, or other legitimate purposes.

20. Account and Data Deletion

Restaurant account holders may request deletion of their account and associated personal information by contacting [PRIVACY EMAIL ADDRESS].

We may need to verify the identity and authority of the person making the request.

After a valid deletion request, we will delete or anonymize information that we are not required or permitted to retain.

Deletion may not immediately remove information required by law, financial records, information necessary to establish or defend legal claims, security logs, fraud-prevention information, or information contained in backups until those backups are securely overwritten according to applicable procedures.

21. Data Access, Correction, Portability and Other Rights

Depending on applicable law, you may request confirmation that we process your personal information, access to personal information, correction of inaccurate information, deletion, restriction of processing, objection to certain processing, portability of certain information, withdrawal of consent where processing relies on consent, and information about how your information is processed.

Some rights are subject to legal limitations and exceptions.

22. India — Digital Personal Data Protection

For individuals and processing activities subject to India's Digital Personal Data Protection Act, 2023 and applicable rules, we will process personal data in accordance with applicable requirements.

Where consent is the applicable legal basis, we will provide appropriate information and mechanisms for withdrawing consent. Requests concerning personal data may be submitted using the contact details in this Privacy Policy.

23. European Economic Area — GDPR

If the GDPR applies, we may process personal data based on performance of a contract, compliance with a legal obligation, legitimate interests, or consent, as applicable.

Our legitimate interests may include security, fraud prevention, maintaining and improving the Services, supporting customers, protecting systems, business administration, product development, and enforcing agreements, provided those interests are not overridden by applicable rights and freedoms.

Where we rely on consent, you may withdraw consent where applicable. Individuals may have rights including access, correction, erasure, restriction, objection, portability, and the right to complain to a supervisory authority.

24. United Kingdom — UK GDPR

Where UK data-protection law applies, we will process personal data in accordance with applicable UK requirements. Individuals may have rights including access, correction, deletion, restriction, objection, data portability, withdrawal of consent, and rights relating to automated decision-making where applicable.

25. California Privacy Rights

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to you, you may have rights to know/access, delete, correct, obtain portable information, and opt out of the sale or sharing of personal information, subject to applicable exceptions.

We do not sell personal information. We also do not knowingly share personal information for cross-context behavioral advertising.

California residents may submit requests through [PRIVACY EMAIL ADDRESS].

26. Brazil — LGPD

Where Brazil's LGPD applies, individuals may have rights including confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed information, portability where applicable, information concerning sharing, revocation of consent where applicable, and other rights established by law.

Requests may be submitted using [PRIVACY EMAIL ADDRESS].

27. Other Jurisdictions

Privacy laws vary between countries, states, and regions. Where applicable law provides additional rights or imposes additional obligations, QR Menu Solutions will process personal information in accordance with those requirements.

28. Marketing Communications

We may communicate with restaurant owners, account holders, prospective customers, and other contacts about new products, product updates, special offers, discounts, restaurant growth services, additional development services, educational content, and promotional campaigns.

Where required by applicable law, we will obtain appropriate consent before sending marketing communications. You may unsubscribe from marketing communications at any time.

29. Business Communications

Even if you unsubscribe from marketing, we may continue sending communications necessary to operate your account, including OTPs, security alerts, billing notifications, subscription notices, service interruptions, important policy changes, account notices, and other transactional communications.

30. Children's Privacy

QR Menu Solutions is not specifically directed toward children. Restaurant customers may view a digital menu without creating an account, and we do not intentionally request children's names, email addresses, phone numbers, or other identifying information merely to view a menu.

If you believe a child has provided personal information to us in circumstances where it should not have been collected, contact [PRIVACY EMAIL ADDRESS].

31. Automated Processing and AI

We may use automated technologies and AI-assisted systems to process menu documents, images, OCR, categorization, and other operational tasks. These technologies are primarily used to provide and improve the Services.

We do not intentionally use personal information to make decisions that produce legal or similarly significant effects on individuals without appropriate safeguards and legal grounds.

32. Aggregated and De-identified Information

We may create aggregated, statistical, or de-identified information from information collected through the Services. This may include aggregate menu visits, usage trends, system performance statistics, and aggregated restaurant usage patterns.

Where information has been properly aggregated or de-identified so that it cannot reasonably be used to identify an individual, we may use it for analytics, research, product development, pricing analysis, service improvement, and other legitimate business purposes.

33. Restaurant Content and Ownership

Restaurants retain their rights in content they provide to QR Menu Solutions, subject to the rights necessary for us to provide the Services.

This may include menus, food photographs, restaurant photographs, logos, descriptions, pricing information, restaurant branding, and other restaurant-provided materials.

By uploading content, the restaurant represents that it has the necessary rights or permissions to provide that content to us and to allow us to process it for the purposes of providing the Services.

34. Third-Party Websites and Services

Our Services may contain links to or integrations with third-party services. Third-party services may include payment providers, analytics providers, social media platforms, communications services, AI services, hosting providers, and other external services.

We are not responsible for the privacy practices of third-party services that operate independently of QR Menu Solutions. We encourage users to review the privacy policies of relevant third parties.

35. Data Breaches and Security Incidents

If we become aware of a security incident involving personal information, we will investigate and take appropriate steps to contain, mitigate, and remediate the incident.

Where applicable law requires notification to affected individuals, regulators, customers, or other parties, we will provide notifications within the timeframes and manner required by law.

36. Government and Legal Requests

We may disclose information when reasonably necessary to comply with applicable law, respond to lawful governmental requests, comply with court orders, protect our rights, investigate fraud, protect users, investigate security incidents, enforce agreements, or prevent illegal activity.

37. Corporate Transactions

If QR Menu Solutions is involved in a merger, acquisition, restructuring, financing, sale of assets, sale of the business, or similar corporate transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate confidentiality and security measures.

38. Your Responsibilities

If you use QR Menu Solutions on behalf of a restaurant, you are responsible for:

• providing accurate information
• maintaining account security
• appropriately managing staff access
• obtaining required permissions for uploaded information
• ensuring uploaded content does not unlawfully contain personal information
• providing appropriate privacy notices to your own customers where required
• complying with applicable privacy and data-protection laws

39. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, new features, technology, data practices, legal requirements, security improvements, or business changes.

When we make material changes, we will provide an appropriate notice where required by applicable law. The updated version will be posted on this page with a new "Last Updated" date.

40. Contact Us

41. Effective Date

Effective Date: September 20, 2026

Last Updated: September 20, 2026