Menu Atelier is operated from the European Union and applies the GDPR. This policy explains what we collect and why.
Data we collect
- Account: e-mail address, hashed password or magic-link tokens, preferred language.
- Menus: the text, images and logos you upload, and the designs generated.
- Orders: Stripe customer and session identifiers, amount, shipping address for printed orders. Card numbers never reach our servers.
- Usage: page views and conversion events for Google Ads, first-touch attribution (UTM, gclid) stored in a cookie for 90 days, IP-derived hashes used to rate-limit the anonymous demo.
- Support: the messages you send through the contact form.
Why we process it
To provide the Service (contract), to process payments and deliver orders (contract), to prevent abuse (legitimate interest), to measure and improve marketing (legitimate interest, consent where required), and to answer you (legitimate interest).
Processors
Supabase (database, authentication and file storage, EU region), Anthropic (AI generation; your menu text and reference images are sent for the sole purpose of designing your menu and are not used for training), Stripe (payments), Vercel (hosting), Telegram (internal notifications of orders and support requests), Google (advertising measurement).
Retention
Account and menu data are kept while your account exists and deleted within 30 days of account deletion. Order records are kept for the legal accounting period. Demo rate-limit hashes are kept for 24 hours.
Your rights
You can access, correct, export and delete your data, and object to processing based on legitimate interest. Write to hello@menu-atelier.com. You may also lodge a complaint with your local data protection authority.
Cookies
We use strictly necessary cookies (session, language) and, when advertising is enabled, Google Ads measurement cookies. No third-party advertising networks beyond Google.