Privacy Policy

1Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

• Account Information: Name, email address, password, business name, and contact details
• Profile Information: Restaurant details, logo, branding preferences
• Menu Content: Menu items, descriptions, prices, categories, and food images
• Payment Information: Billing address and payment method details (processed securely through third-party payment processors)
• Communications: Messages, feedback, and support requests

1.2 Automatically Collected Information

When you use our Service, we automatically collect certain information:

• Usage Data: Pages viewed, features used, time spent, and interaction patterns
• Device Information: Device type, operating system, browser type, IP address
• Location Data: General location information based on IP address
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience
• Analytics Data: Menu views, QR code scans, and engagement metrics

1.3 Information from Third Parties

We may receive information from third-party services such as authentication providers, payment processors, and analytics platforms.

2How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve the Service
• Account Management: To create and manage your account
• Menu Publishing: To host and display your digital menus
• Payment Processing: To process subscriptions and handle billing
• Customer Support: To respond to your inquiries and provide assistance
• Analytics: To understand usage patterns and improve our Service
• Security: To detect, prevent, and address fraud and security issues
• Communications: To send service updates, newsletters, and promotional materials
• Legal Compliance: To comply with legal obligations and enforce our Terms

3How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who assist us in operating our Service:

• Cloud hosting and storage providers (Firebase/Google Cloud)
• Payment processors (Paddle, RevenueCat)
• Analytics services
• Customer support platforms
• Email service providers

Paddle.com Market Limited ("Paddle") acts as our merchant of record for web-based subscription payments. As merchant of record, Paddle processes your payment information directly, handles applicable sales tax and VAT, and issues transaction receipts. À La Menu does not store or have direct access to your full payment card details — this data is handled entirely by Paddle in accordance with their own privacy policy and PCI-DSS compliance standards.

3.2 Public Information

Your published menus are publicly accessible via your custom URL (ala.menu/yourrestaurant) and QR codes. This is necessary to provide the Service.

3.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Enforce our Terms and policies
• Protect our rights, property, or safety
• Prevent fraud or security threats

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

4Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication and password protection
• Regular security audits and updates
• Limited access to personal information
• Secure data centers with redundancy

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to processing of your information
• Restriction: Request restriction of processing
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us at support@links.vip. We will respond to your request within 30 days.

6Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how you use the Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track effectiveness of marketing campaigns

You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.

7Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

When you delete your account, we will delete or anonymize your personal information within 90 days, except where required to retain it for legal purposes.

8Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete it.

9International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws.

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, regardless of where it is processed.

10Third-Party Links and Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party services you access through our Service.

11California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or shared
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

We do not sell personal information. To exercise your CCPA rights, contact us at support@links.vip.

12European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing your data includes consent, contract performance, legal obligations, and legitimate interests.

13Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email or through the Service
• Request your consent if required by law

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

14Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: