سياسة الخصوصية

Welcome to MyMenuQR — the QR-based digital menu platform for restaurants and stores. We value your privacy and are committed to protecting your data with full transparency.

This policy explains how we collect, use, and protect your data when you use our services at my-menu-qr.com and all related pages and services.

By using the platform, you agree to this policy. If you do not agree with any part, please do not use the service.

1. Business Owners Data (Restaurants/Stores):

• Name and email address
• WhatsApp number
• Business name and type (restaurant/store)
• City and address
• Uploaded logos and images
• Menu details (items, prices, descriptions)
• Account settings and preferences

2. Customer Data (Menu Users):

• Name and phone number when placing an order
• Table number or delivery address
• Order details and timestamps

3. Automatic Technical Data:

• IP address, browser type, operating system
• Pages visited and visit times
• Cookies necessary for login sessions

We use your data exclusively for:

• Providing and operating platform services
• Verifying your identity and securing your account
• Sending order notifications and alerts
• Communicating about your account or subscription
• Improving the service through analytics
• Complying with Iraqi local laws

⚠️ We will never use your data for third-party marketing purposes.

We do not sell your data. Ever.

We only share it in these cases:

• Business owners: Receive data from customers who placed orders
• Service providers: Trusted technical partners we rely on to operate the platform (hosting, security, notifications), bound by international data protection standards
• Authorities: Upon formal legal request from competent bodies

We use only necessary cookies for:

• Maintaining your login session
• Saving your preferences (e.g., dark mode)
• Preventing unauthorized usage

We do not use advertising or third-party tracking cookies.

We apply multi-layered security measures to protect your data:

• Full encryption of all communications using modern security protocols
• Password hashing — we never see or store passwords in readable form
• Two-factor authentication (2FA) available for accounts
• Row-Level Security at the database layer
• Regular secured backups
• Audit logging of all administrative activities
• Protection against DDoS attacks and automated abuse
• Isolation of each project's data from other projects

Despite applying the highest security standards, no transmission or storage method is 100% secure, and we cannot guarantee absolute security.

We retain your data throughout your use of the service. If you delete your account:

• Personal data is deleted within 30 days
• Billing data is kept for 7 years (legal obligations)
• Uploaded images and content are deleted immediately

You have the full right to:

• Access: Request a copy of your data
• Correction: Modify any inaccurate information
• Deletion: Delete your account and data
• Portability: Receive your data in a transferable format
• Objection: Refuse specific processing of your data

To exercise these rights, contact us (see "Contact Us" section).

Our services are directed at adults (18+) for commercial purposes. We do not knowingly collect data from minors. If we discover that a minor has provided personal data, we will delete it immediately.

We may update this policy from time to time. When making significant changes, we will notify you via email or a prominent notice on your dashboard. The last update date is shown at the top of this page.

For any privacy inquiry or to exercise your rights: