Privacy Policy

What personal data we collect from restaurants and their guests, why we collect it, and the choices you have.

Last updated November 2, 2026 5 min read

1. Who we are

SmartMenu is operated by Smartmenu, qatar ("we", "us"). This Privacy Policy explains what personal data we collect when you use smartmenubeta.vercel.app, why we collect it, and the choices you have. For any privacy question, email Keezplatform@gmail.com.

This policy covers two groups of people:

Customers — restaurant owners and their team members who create an account and build menus.
Guests — people who open a menu by scanning a QR code or following a link.

2. Data we collect

Customers

Data	Examples	Why
Account details	Name, email address, password (stored only as a secure hash)	To create and secure your account
Restaurant and menu content	Restaurant name, address, phone, opening hours, Wi-Fi details, menu items, prices, photos, logos	To build and show your menu
Billing details	Plan, billing period, trial dates, payment history and invoices. Card details are entered on and handled by our payment provider; we never see or store your full card number	To run free trials, take automatic payments and keep accounting records
Usage and device data	IP address, browser, pages used, sign-in times	Security, troubleshooting and improving the service
Messages	Emails and support requests you send us	To answer you

Guests

Guests do not need an account and we do not ask for their names or contact details. When a guest opens a menu, we record limited usage data so restaurants can see how their menu is used:

that a QR code was scanned or a menu was viewed, and which items were opened;
device type (phone, tablet or desktop), browser language and approximate country;
a random session identifier that is not linked to a name or account.

This usage data is automatically deleted after 90 days; only totals (for example "120 scans this week") are kept longer.

The "My list" feature, which lets guests save dishes to show their server, is stored only in the guest's own browser and is never sent to us.

3. How we use data

We use personal data to:

provide, maintain and secure the service;
show restaurants statistics about their menu;
run free trials, take automatic payments when a trial ends and on each renewal, and keep accounting records;
send service emails, such as password resets, trial reminders and important changes (you cannot opt out of these while you have an account);
send product news, only if you agree — you can unsubscribe at any time;
prevent fraud and abuse and comply with the law.

We do not sell personal data, and we do not use guests' data for advertising.

4. Legal bases

Where data-protection laws such as the GDPR apply, we rely on:

contract — to provide the service you signed up for;
legitimate interests — to keep the service secure, understand how it is used and improve it;
consent — for optional marketing emails, which you can withdraw at any time;
legal obligation — for tax and accounting records.

5. Cookies and local storage

We only use cookies that are needed for the service to work:

Name	Purpose	Duration
sm_at	Keeps you signed in (short-lived access token)	15 minutes
sm_rt	Renews your sign-in securely	30 days
sm_rid	Remembers which menu you were working on	1 year

Guest menus use your browser's local storage for "My list". We do not use advertising or cross-site tracking cookies. If we ever add optional analytics cookies, we will ask for your consent first.

We share data only with service providers that help us run SmartMenu, under contracts that require them to protect it and use it only on our instructions:

cloud hosting and content delivery;
database hosting;
file and image storage;
email delivery;
payment processing.

We may also share data if required by law, to protect our rights or users' safety, or as part of a business transfer (in which case this policy will continue to apply).

Information a restaurant publishes on its menu — such as its address, phone number and opening hours — is visible to anyone who opens that menu.

7. International transfers

Our providers may store or process data outside your country. When that happens, we use appropriate safeguards, such as standard contractual clauses, as required by applicable law.

8. How long we keep data

Account and menu data — while your account is active. When you delete a menu or your account, we delete or anonymise the related data within 30 days, except where we must keep it longer.
Guest usage data — automatically deleted after 90 days.
Billing records — kept as long as tax and accounting laws require.
Backups — overwritten in their normal cycle.

9. Security

We protect data with measures including encrypted connections (HTTPS), password hashing, short-lived sign-in tokens, access controls and limited staff access. No system is completely secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

10. Your rights

Depending on where you live, you may have the right to:

access the personal data we hold about you;
correct inaccurate data;
delete your data;
receive a copy of your data in a portable format;
object to or restrict certain processing;
withdraw consent at any time.

You can update most account and menu information yourself in the dashboard. For anything else, email Keezplatform@gmail.com. We will respond within 30 days. You also have the right to complain to your local data-protection authority.

Guests who want to ask about data a restaurant collects in the restaurant itself should contact that restaurant directly.

We're happy to help — just send us an email.

Keezplatform@gmail.com