Privacy notice
Plain-language summary of how MenuDoro handles data for restaurant owners, staff and guests. Updated 12 October 2026.
Who we are
MenuDoro (menudoro.com) provides table QR ordering for restaurants. Owners create an account; guests scan a table QR and order in the browser.
Who is responsible
For owner accounts, MenuDoro is the controller. For guest orders and preferences, the restaurant you visit is the controller and MenuDoro processes that data on its behalf, only to run the menu and orders.
What we process
- Owners / staff: name and email, password hash (or Google account link), restaurant profile and menu content, kitchen password hash, mobile phone number (checked with an SMS code when you sign up), interface language, and Stripe customer/subscription IDs when you pay (card details stay with Stripe).
- Guests: table orders, order notes and optional preferences you enter (allergens, diet, budget, a display name on your device). No guest account is needed. We also count anonymous menu usage (searches, dish views) for the restaurant's statistics, without identifying you.
- Technical: session and table cookies (see Cookies), IP addresses for rate limits and abuse protection (login, codes, password reset), single-use password-reset links (valid 45 minutes) and security logs.
Why
To provide the service you ask for: run your venue's menu and orders, keep accounts secure and prevent abuse. Legal bases: contract (owner account and plan), legitimate interest (security, anonymous statistics), and, for guest orders, the restaurant's own legal basis.
Sharing
We do not sell personal data or use advertising trackers. Service providers we use: Railway (hosting), Cloudflare R2 (off-site backups, encrypted at rest), Resend (account emails), Zoho Mail (our support inbox), seven.io (SMS codes), Cloudflare Turnstile (bot checks), Stripe (payments), Google (optional sign-in) and Replicate (AI translation, menu import, allergen suggestions and header images; it receives menu content, never guest data). Some are outside the EU/EEA; transfers rely on the providers' standard contractual clauses.
Referral program
If you apply to the referral program, we process your name, country, tax ID, email, optional phone and company name, and your payout details (PayPal email or IBAN and account holder), plus visits through your link, which restaurants signed up through it, and your commissions and payouts. For restaurants that arrive through a referral link we store the link code (cookie md_ref) and the referral record. Purpose: to run the program, check eligibility and prevent self-referrals, and pay you. Legal basis: the contract with you (the Referral Terms) and our legal obligations (tax and accounting). Referrer data is kept while you take part and then as long as tax and accounting law requires (in Spain usually up to 6 years); data of rejected applications is deleted within 12 months. You have the rights described below.
Retention
Account, menu and order data are kept while the restaurant account exists. Sessions expire (see Cookies); verification codes and reset links expire within minutes. When an owner deletes the account (Settings → Danger zone), the restaurant, its staff accounts, menu, orders, statistics and photos are deleted at once. Backups roll over on their own: daily copies within 14 days and weekly copies within 8 weeks; a backup is only ever used to restore the service. Stripe keeps invoices as tax law requires.
Your rights (EU/EEA)
Under the GDPR you can access, correct, delete or get a copy of your personal data, object to or restrict processing, and complain to your data protection authority (in Spain, the AEPD). Owners can edit or delete everything from the panel; guests should contact the restaurant about their orders.
Contact
Contact (data controller for owner accounts): contact@menudoro.com
Write to the address above for privacy questions or to exercise your rights. For guest questions about an order, contact the restaurant directly.