Privacy Policy
Last updated: October 27, 2026
This Privacy Policy explains what data DotMenu (“we”, “us”) collects, why we collect it and how we handle it. DotMenu is a software service operated from Brazil. Questions or requests: hello@getdotmenu.com.
1. Data we collect
From businesses that use DotMenu (our clients):
- Account data: name, email address, phone/WhatsApp number, business name and login credentials;
- Business content: menus, prices, photos, logos, loyalty card settings and messages;
- Billing data: payments are processed by Stripe. We receive payment status and limited details (such as card brand and last four digits), but never your full card number.
From end customers of those businesses:
- Loyalty card: name, phone/WhatsApp number, and the visits, stamps and rewards recorded on the card. If the business asks for it, birthday;
- Waitlist and reservations: name, phone number, party size and date/time;
- Digital menu: anonymous usage data, such as which dishes are viewed in 3D. No account is needed to view a menu.
We also collect basic technical data (such as IP address, browser type and device) in server logs, to keep the service secure and working.
2. Why we use it
- To provide the service: show menus, run waitlists and reservations, issue and update loyalty cards, and send wallet notifications;
- To let each business see its own customers' stamps and visits and send them messages through the loyalty card;
- To bill our clients, provide support and communicate about the service;
- To keep the service secure, prevent abuse and improve it.
For end-customer data, the business you visited decides how to use it, and we process it on that business's behalf.
3. Service providers (processors)
We share data only with providers that help us run DotMenu:
- Supabase — database, authentication and file storage (hosting);
- Vercel — website and application hosting;
- Stripe — payment processing for subscriptions;
- Apple Wallet and Google Wallet — storing loyalty cards on customers' phones and delivering their notifications.
These providers may process data in countries other than your own, including the United States and Brazil.
4. We don't sell your data
We do not sell or rent personal data, and we do not share it with advertisers. We disclose data only when required by law.
5. Retention
We keep client account data while the account is active and for as long as needed afterwards for legal, tax and accounting obligations. End-customer loyalty data is kept while the business uses DotMenu, or until deletion is requested. When a business cancels, we delete or anonymize its customers' data within a reasonable period, unless the law requires us to keep it.
6. Your rights and deletion requests
You can ask to access, correct or delete your personal data at any time by emailing hello@getdotmenu.com. End customers can also remove the loyalty card from their phone's wallet at any time; to have the underlying data deleted, contact the business or email us and we will handle the request.
7. Security
We use encrypted connections (HTTPS), access controls and reputable infrastructure providers to protect data. No system is 100% secure, but we take reasonable measures to keep your data safe.
8. Children
DotMenu is a business tool and is not directed at children under 13. We do not knowingly collect their personal data.
9. Changes to this policy
We may update this policy from time to time. We will update the date at the top of this page and, for material changes, notify our clients.
10. Contact
Privacy questions or requests: hello@getdotmenu.com. See also our Terms of Service.