Privacy Policy
1. Who we are
Platey is a digital-menu service operated by [COMPANY NAME], registered at [COMPANY ADDRESS] (the "Company", "we", "us"). You can reach us at hello@platey.menu.
2. What this policy covers
This policy describes what personal data we collect, why we collect it, how we use it, and your rights. It applies to restaurant owners who create an account with us, and to diners who browse published menus.
3. Data we collect from restaurant owners
- Account data — email address, hashed password, name.
- Restaurant data you enter — restaurant name, address, menu content, photos, prices.
- Technical data — IP address, browser, device identifiers, pages viewed in the owner dashboard.
- Payment data if you subscribe to a paid plan. Card details are handled by our payment processor and never stored on our servers.
4. Data we collect from diners
When a guest scans a QR code and views a menu, we collect aggregate technical data only (page views, country, device type) to understand traffic. The cart a diner builds stays on their device in local storage — it is never sent to our servers.
5. How we use your data
- Provide and operate the service (publish your menu, generate QR codes, serve images).
- Communicate with you about your account, billing, or service updates.
- Detect abuse and keep the service secure.
- Improve Platey based on aggregated usage data.
6. Legal basis
Under GDPR, we rely on: (a) contract — to provide the service you signed up for; (b) legitimate interests — to secure, maintain, and improve the service; (c) consent — where we ask for it; (d) legal obligations — accounting, tax, and regulatory requirements.
7. Sharing your data
We share data only with processors who help us run the service: hosting and CDN (Cloudflare), object storage (Cloudflare R2), email delivery, and payment processing. We do not sell your data. We may disclose data if compelled by a valid legal order.
8. Where your data is stored
Our infrastructure is hosted in [REGION]. Some processors may operate outside your country; in that case, we rely on standard contractual clauses to protect your data.
9. How long we keep data
Account data is kept while your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it (for example, invoices for tax purposes).
10. Your rights
You have the right to access, correct, delete, export, or restrict the processing of your personal data. To exercise any of these rights, email hello@platey.menu. You may also lodge a complaint with your local data-protection authority.
11. Cookies
We use essential cookies to keep you logged in. We do not use tracking or advertising cookies.
12. Changes
We may update this policy. If changes are significant, we'll email account holders. The "Last updated" date at the top reflects the current version.