Privacy Policy
This policy explains how Grandes Planos, Lda., the operator of Menuyo, processes personal data under the GDPR and Portuguese Law 58/2019. Use the privacy contact above for questions or to exercise your rights.
1Who is responsible
We are the controller for account, billing, contact, support, security and website analytics data. Where a business uses Menuyo to process personal data on its behalf, that business determines the purposes and Menuyo acts as processor under the agreed terms. For information published by a venue in its menu, also contact that venue.
2Data and sources
We receive information you provide when creating an account, using the application or requesting help: name, email, business, billing details, uploaded content, messages and an optional phone number. Stripe supplies payment identifiers and status; if you choose Google sign-in, that provider supplies the necessary identity information. Servers also process IP addresses, technical data and access logs for operation and security.
3Purposes and legal bases
Account creation, service delivery, billing and requested pre-contract enquiries rely on performing a contract or taking steps at your request (GDPR Article 6(1)(b)). Tax and other legal duties rely on Article 6(1)(c). Security, abuse prevention, support for business representatives and legal claims rely on the legitimate interest in operating and protecting the service (Article 6(1)(f)), balanced against your rights. Google Analytics relies on your consent (Article 6(1)(a)).
4Contact and communications
Contact form requests are stored in the support inbox and may generate an email notification; replies are sent by email. Required fields are necessary to reply; business and phone are optional. Cloudflare Turnstile checks interactions and prevents abuse using technical browser and connection data. A support request or free trial is not consent to marketing. Promotional communications require their own lawful basis and a simple opt-out. Deleting an account does not authorise marketing. Any archived contact remains subject to its own lawful basis and the rights to object and request erasure.
5Statistics and cookies
Google Analytics loads only after you accept analytics and processes navigation, device and cookie identifier data. You can reject it without losing access and withdraw permission through Manage cookie preferences. Our own menu statistics count views, interactions, language and referring origin without creating a persistent browser visitor identifier. Technical requests may generate security logs. The Cookie Policy explains purposes and durations.
6Recipients and optional features
Access is limited to authorised people and necessary providers: hosting and infrastructure, email, Stripe for payments, Cloudflare for protection, Google for chosen sign-in and consented analytics, Microsoft for offsite backups and Anthropic for AI features when you request them. AI may receive menu text needed for the task; avoid including personal data in these requests. The database, authentication and files are hosted within the service infrastructure. We do not sell personal data. We may disclose information to authorities when legally required.
7International transfers
Some global providers may process data outside the European Economic Area. Transfers subject to GDPR Chapter V require an applicable adequacy decision or other valid safeguards, such as standard contractual clauses and supplementary measures where necessary. Ask the privacy contact for information about destinations and a copy or description of safeguards. Using a provider does not mean all its processing occurs in the EU.
8Retention and erasure
Accounts and content are retained to provide the service for as long as necessary for the contractual relationship. An expired trial or subscription does not itself trigger automatic erasure after 10 or 30 days. You can request closure and erasure; we assess what can be deleted and what must be retained for legal obligations or legal claims, and explain any limits. Support messages and technical logs are retained only as needed for the request, security and dispute resolution. Tax documents follow applicable statutory periods. Restricted-access backups have their own retention cycle and do not allow immediate selective deletion; erasure requests must be reapplied if a backup is restored.
9Your rights and response times
Where legally applicable, you can request access, rectification, erasure, restriction, portability and object to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing and object to direct marketing. Send requests to geral@grandesplanos.com. We respond without undue delay and normally within one month; complex requests may take up to two additional months, explained within the first month. Requests are normally free. We seek additional identity information only when necessary and proportionate.
10Complaints, security and decisions
You may complain to the CNPD or another competent supervisory authority without contacting us first. We use access controls, encrypted connections and backups; no system is risk-free. We do not make solely automated decisions producing legal or similarly significant effects about you. AI tools assist with menu editing and require human review.
11Updates
The date above identifies this version. Material changes to purposes, recipients or processing conditions will be accompanied by updated information and, where needed, direct notice or a new consent request.