Privacy policy

Who we are

MenuGO is an online ordering and operations platform for restaurants in Montenegro. It is operated from Tabijska 231, 85000 Bar, Montenegro. You can reach us at info@menugo.me.

What this policy covers

This policy covers this website (menugo.me), the MenuGO back office that restaurant staff sign in to (admin.menugo.me), and the MenuGO integration with Google Business Profile.

Each restaurant's own ordering site (such as restaurant-name.menugo.me, or the restaurant's own domain) has its own privacy policy. On those sites the restaurant decides how its customers' data is used, and MenuGO processes that data on the restaurant's behalf.

Data we process

• Restaurant staff accounts: name, email address, phone number, role and language, used to sign in to the back office and run the restaurant's orders.
• Restaurant business information: the restaurant's menu, prices, opening hours, address and settings, entered by the restaurant.
• Messages you send us: what you write to us by email or WhatsApp, used to answer you.
• Technical logs: server access logs (with request addresses shortened so they do not contain tokens or order codes), kept for 14 days for security and troubleshooting.

Google user data

A restaurant can ask MenuGO to keep its menu on Google Maps up to date. To do that, the restaurant adds MenuGO's business group as a manager of its Google Business Profile. MenuGO then uses the Google Business Profile API, with the business.manage permission, to:

• read the list of profiles that have added MenuGO as a manager: each profile's identifier, its Google Place ID, and whether Google allows it to have a menu, so that we can match it to the right restaurant in MenuGO;
• publish that restaurant's menu from MenuGO to its profile, only for restaurants that have asked us to.

We do not read reviews, messages, questions, insights, or data about the profile's visitors. We do not change the business name, address, categories or opening hours through this integration.

We do not keep a copy of data received from Google. We store only our own record of whether the last menu update succeeded and, if it failed, the reason Google gave.

Data received from Google is used only to provide this feature. It is not sold, not used for advertising, not used to train AI or machine-learning models, and not shared with anyone except as needed to provide the feature, for security, or to comply with the law. MenuGO staff do not read it except to fix a problem a restaurant has reported, for security, or where the law requires it.

MenuGO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

A restaurant can end this access at any time by removing MenuGO's business group under People and access in its Google Business Profile, or by asking us at info@menugo.me. The menu already published stays on the profile until the restaurant changes or removes it.

Service providers

We use a small number of providers to run the platform: Cloudflare (network delivery and encrypted backup storage), Google Firebase (push notifications to staff and customers) and Brevo (sending email such as password resets). They process data only to provide their service to us.

How long we keep data

We keep restaurant and staff data while the restaurant uses MenuGO. Encrypted backups are kept for up to twelve months and then deleted. Server access logs are kept for 14 days.

Your rights

You can ask us for a copy of your personal data, and ask us to correct or delete it, by writing to info@menugo.me. If your question is about an order you placed with a restaurant, we will pass it to that restaurant, because the restaurant decides how its customers' data is used. You also have the right to complain to the personal data protection authority of Montenegro (Agencija za zaštitu ličnih podataka i slobodan pristup informacijama).

Changes

When this policy changes, we update this page and the date at the top.