Privacy Policy

EatQR (eatqr.io) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our platform. By using EatQR, you consent to the practices described in this policy.

We collect the following types of data:

• Account data: name, email address, and authentication details when you sign up
• Menu content: restaurant names, menu items, descriptions, images, and logos you upload
• Subscription data: plan type and billing information (processed by Polar.sh; we do not store payment card details)
• Usage data: page views, QR code scans, and feature usage for analytics
• Technical data: IP address, browser type, device information, and cookies

We use your data to:

• Provide and maintain the EatQR service
• Process your subscription payments
• Generate and serve your digital menus
• Send important service-related communications
• Improve our platform and user experience
• Comply with legal obligations

When you use our AI-powered menu extraction or translation features, your uploaded files (images or PDFs) are sent to Google Gemini AI for processing. This data is used solely to extract menu content and generate translations. We do not use your content to train AI models. Google's data processing is subject to their privacy policy.

We share data with the following third-party services as necessary to operate EatQR:

• Supabase: stores your account data, menu content, and authentication information
• Polar.sh: processes subscription payments; receives your email and payment details
• Google Gemini: processes uploaded files for AI menu extraction and translation
• Vercel: hosts the application and may process technical data

We do not sell your personal data to third parties.

EatQR allows you to optionally configure tracking pixels on your public menu pages:

• Meta Pixel (Facebook/Instagram): if you add your Meta Pixel ID, Meta will collect data from visitors who view your menu
• Google Analytics: if you add your Google Analytics ID, Google will collect visitor analytics data

These tracking tools are entirely optional and configured by you. EatQR is not responsible for the data collected by these third-party tracking services. Your visitors should be informed about any tracking you enable.

EatQR uses essential cookies to:

• Maintain your authentication session
• Remember your language preference

We do not use advertising or non-essential tracking cookies. Third-party tracking pixels you configure may set their own cookies on your menu pages.

We retain your data for as long as your account is active. When you delete your account through the settings page, we will delete your personal data and menu content. Some data may be retained for a limited period as required by law or for legitimate business purposes (e.g., billing records).

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication through Supabase, and restricted access to production systems. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your data (available through account settings)
• Portability: request your data in a portable format
• Objection: object to certain types of data processing

To exercise these rights, contact us at contact@eatqr.io.

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The "last updated" date at the top of this page indicates when the policy was last revised.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at contact@eatqr.io.