Cloud Menu Privacy Policy

This Privacy Policy explains how Cloud Menu LLC ("Cloud Menu," "we," "us," or "our") collects, uses, discloses, and protects information when you access or use the Cloud Menu websites, platform, digital menus, QR experiences, applications, and related services (collectively, the "Services").

This Privacy Policy applies to Cloud Menu customers, account users, website visitors, and people who view public digital menus powered by Cloud Menu.

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the Services.

1. Information We Collect

The information we collect depends on how you interact with the Services.

Account and Business Information

When a business or authorized user creates or manages an account, we may collect:

• name;
• business name;
• business email address;
• telephone number;
• account role and permissions;
• login and authentication information;
• subscription and billing status;
• restaurant or location information; and
• communications and support history.

Customer Content

We collect and store information that customers choose to upload, enter, configure, or publish through the Services, including:

• menus, categories, items, descriptions, ingredients, and prices;
• restaurant names, addresses, hours, and contact information;
• photographs, logos, trademarks, and other media;
• promotions, offers, banners, notices, and disclaimers; and
• settings and configuration information.

Customers control the content they submit and are responsible for ensuring that they have the right to provide it to Cloud Menu.

Payment and Subscription Information

Payments may be processed by a third-party payment processor. Cloud Menu may receive limited billing information such as subscription status, transaction identifiers, payment method type, card brand, expiration details, billing contact information, and the last digits of a payment card.

Cloud Menu does not intend to receive or store complete payment-card numbers or card security codes. Payment processors handle complete payment credentials according to their own terms and privacy practices.

Device, Log, and Technical Information

When you access the Services, we and our service providers may automatically collect limited technical information, including:

• Internet Protocol address;
• browser type and version;
• device type and operating system;
• language and time-zone settings;
• referring and exit pages;
• date and time of access;
• pages, menus, and features viewed;
• QR code or link interactions;
• diagnostic, performance, and error information; and
• cookie, local-storage, session, and similar technical identifiers.

Public Menu and Usage Metrics

Cloud Menu may collect first-party usage metrics to understand how public menus and platform features are used. Depending on the feature and configuration, these metrics may include:

• menu and page views;
• QR scans;
• item, category, offer, or link interactions;
• approximate time and date of an interaction;
• referring source;
• device and browser category;
• general performance information; and
• identifiers associated with a menu, location, campaign, or item.

Cloud Menu uses these metrics to operate the Services, provide customer-facing analytics where available, detect problems, understand aggregate usage, and improve product performance. Analytics may be incomplete, estimated, delayed, or affected by browser and privacy settings.

Communications

If you contact us, we may collect your name, email address, business information, the contents of your message, attachments you choose to provide, and information needed to respond.

2. Information We Do Not Intentionally Collect

Except for limited account-authentication information needed to secure authorized users, Cloud Menu is not designed to collect sensitive personal information such as:

• Social Security numbers or other government identification numbers;
• complete payment-card or bank-account credentials;
• medical records or protected health information;
• biometric identifiers;
• precise geolocation;
• racial or ethnic origin;
• religious or philosophical beliefs;
• sexual orientation or sex-life information;
• union membership; or
• personal information about children.

Do not submit sensitive personal information through Customer Content, support messages, menu fields, analytics parameters, URLs, or other areas of the Services.

If sensitive information is submitted despite this restriction, Cloud Menu may remove it and will process it only as reasonably necessary to secure the Services, respond to the submission, comply with law, or delete it.

3. How We Use Information

Cloud Menu may use information to:

• create, authenticate, maintain, and secure accounts;
• provide, operate, maintain, and improve the Services;
• publish and deliver Customer Content as directed by the customer;
• process subscriptions and maintain billing records;
• provide support and respond to communications;
• generate customer-facing and internal metrics;
• understand usage and improve menus, features, and performance;
• monitor availability, diagnose errors, and prevent abuse;
• protect Cloud Menu, customers, users, and the public from fraud, misuse, and security threats;
• enforce our Terms of Service and other agreements;
• comply with legal obligations and respond to lawful requests;
• maintain business, tax, accounting, and audit records; and
• communicate about material service, security, billing, legal, or policy matters;
• measure and improve Cloud Menu's marketing website and campaigns; and
• advertise Cloud Menu to restaurants and business prospects who visit Cloud Menu-controlled marketing pages, subject to the choices described in this Privacy Policy.

Cloud Menu does not use personal information to make decisions that produce legal or similarly significant effects through automated profiling.

4. Analytics, Advertising, and Restaurant-Controlled Tools

Cloud Menu uses Google Analytics to understand website and product usage, evaluate performance, and improve the Services. Google Analytics may use cookies or similar technologies and may receive information such as device details, browser information, approximate location derived from an IP address, pages viewed, interactions, and referral information.

Google processes analytics information under its own terms, data-processing terms, and privacy practices. More information is available through Google's privacy and Google Analytics resources.

Cloud Menu may also use other analytics, diagnostics, hosting, security, email, support, and operational tools. These providers may process limited information on Cloud Menu's behalf only as reasonably necessary to provide their services, subject to contractual or legal obligations where applicable.

Cloud Menu also operates its own first-party metrics system. First-party metrics may record menu views, QR scans, item interactions, feature usage, performance, and similar events associated with a restaurant, location, menu, campaign, or item.

Cloud Menu Marketing Website

On getcloudmenu.com and other Cloud Menu-controlled marketing pages, Cloud Menu may use Google Analytics, Google Ads, tags, pixels, and similar technologies to measure campaigns, create advertising audiences, and show Cloud Menu advertising to restaurants and business prospects who previously visited those pages. Depending on your location and applicable law, this activity may be considered targeted advertising or sharing personal information for cross-context behavioral advertising.

Cloud Menu does not sell personal information for money. You may manage nonessential advertising technologies through Cookie Settings and may exercise any additional opt-out rights described below.

Public Menus, Storefronts, and Product Analytics

Cloud Menu does not place its own advertising or remarketing tags on customer public menus or storefronts. Cloud Menu does not export audiences derived from diner visits to public menus or storefronts to Google Ads, and does not use those visits to promote Cloud Menu or another restaurant.

Cloud Menu may use Google Analytics and its own first-party metrics on public menus, storefronts, and product pages for operational analytics, security, diagnostics, service improvement, and customer-facing reporting. Cloud Menu keeps its marketing advertising configuration separate from its product and storefront analytics configuration.

Restaurant-Controlled Advertising and Analytics

A restaurant may independently use an approved analytics or advertising integration on its own menu or storefront for that restaurant's own purposes. When it does, the restaurant determines the purposes and means of that activity and is responsible for its own privacy notice, consent, opt-out mechanisms, vendor settings, and legal compliance.

Cloud Menu does not use a restaurant's advertising audience for Cloud Menu's benefit or make that audience available to another restaurant. Questions or requests concerning a restaurant-controlled tag, campaign, or audience should be directed to that restaurant. Cloud Menu may assist the restaurant where required by law or contract.

5. Cookies and Similar Technologies

Cloud Menu and its service providers may use cookies, local storage, session storage, pixels, tags, and similar technologies to:

• maintain sessions and authentication;
• remember settings and preferences;
• protect accounts and prevent abuse;
• measure website and menu usage;
• diagnose errors and performance; and
• understand whether features work as intended;
• measure marketing campaigns on Cloud Menu-controlled marketing pages; and
• advertise Cloud Menu to restaurants and business prospects who visit those marketing pages.

Some technologies are necessary for the Services to function. Other analytics and advertising technologies may be optional depending on applicable law and your location.

Cloud Menu provides a Cookie Settings control where you can review and change available choices for analytics and advertising technologies. Withdrawing consent or opting out applies prospectively and does not affect processing that occurred before the choice was received. Necessary technologies cannot be disabled through Cookie Settings because they support functions such as security, network management, authentication, and preference storage.

You can also use browser settings to delete or block cookies. Blocking necessary storage may prevent account access or cause parts of the Services to work incorrectly. Cloud Menu honors consent choices and legally applicable browser-based opt-out preference signals as described below.

6. How We Disclose Information

Cloud Menu may disclose information in the following circumstances.

Service Providers

We may provide limited information to vendors that help us operate the Services, including providers of:

• cloud hosting and content delivery;
• databases, storage, and backups;
• authentication and account security;
• payment processing;
• analytics and diagnostics;
• advertising, campaign measurement, and consent management for Cloud Menu-controlled marketing pages;
• transactional email and communications;
• customer support;
• fraud prevention and security; and
• professional legal, accounting, insurance, or compliance services.

These providers may use information only as allowed by their agreements and applicable law.

Advertising Partners

On Cloud Menu-controlled marketing pages, Cloud Menu may disclose limited device, cookie, and interaction information to advertising and measurement partners, including Google, to measure campaigns, create audiences, and deliver Cloud Menu advertising to restaurants and business prospects. Depending on applicable law, this may be considered sharing for cross-context behavioral advertising or processing for targeted advertising. It is not a monetary sale of personal information.

Customer-Directed Disclosures

We publish Customer Content and make it available to the public or to designated users as directed by the customer. Public menu information is intended to be viewed and shared publicly.

Legal and Safety Reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law, regulation, court order, subpoena, or lawful government request;
• enforce our agreements;
• investigate fraud, abuse, security incidents, or illegal activity;
• protect the rights, property, or safety of Cloud Menu, our customers, users, or others; or
• establish, exercise, or defend legal claims.

Business Transactions

Information may be disclosed or transferred in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction. Any recipient will remain subject to applicable privacy obligations.

7. No Sale of Personal Information and Advertising Choices

Cloud Menu does not sell personal information for money or other valuable consideration.

Cloud Menu's use of advertising technologies on its marketing website may be considered sharing personal information for cross-context behavioral advertising or targeted advertising under some privacy laws. This activity is limited to advertising Cloud Menu to restaurants and business prospects based on visits to Cloud Menu-controlled marketing pages.

Cloud Menu does not use diner visits to customer menus or storefronts to advertise Cloud Menu or another restaurant, and does not export those audiences to Google Ads. A restaurant's independently controlled advertising activity is governed by that restaurant's privacy practices.

You may use Cookie Settings to opt out of or withdraw consent for Cloud Menu advertising technologies where that choice is available. Cloud Menu also honors legally applicable browser-based opt-out preference signals. You may contact legal@getcloudmenu.com to exercise an applicable right to opt out of sharing or targeted advertising.

Cloud Menu's use of service providers for hosting, security, payment processing, communications, diagnostics, and operational analytics is for operating and improving the Services and is not intended as a sale of personal information.

8. Public Information

Digital menus, business details, restaurant locations, hours, photographs, promotions, and other Customer Content may be intentionally public. Information published on a public page can be viewed, copied, indexed, cached, or shared by third parties outside Cloud Menu's control.

Customers should not place private, confidential, or sensitive personal information in public Customer Content.

9. Data Retention

Cloud Menu retains information for as long as reasonably necessary to:

• provide and maintain the Services;
• keep an account active;
• preserve legitimate business and transaction records;
• comply with tax, accounting, contractual, and legal obligations;
• resolve disputes and enforce agreements;
• prevent fraud and abuse;
• maintain security and service continuity; and
• support backups and disaster recovery.

Retention periods vary according to the type of information, the purpose for which it is used, account status, legal obligations, and technical backup cycles.

When information is no longer reasonably needed, Cloud Menu may delete, aggregate, or deidentify it. Information may remain temporarily in encrypted or access-restricted backups until those backups are overwritten through normal retention cycles.

10. Data Security

Cloud Menu uses reasonable administrative, technical, and organizational measures intended to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

Cloud Menu uses HTTPS and current Transport Layer Security protocols to encrypt information transmitted between supported browsers and the Services. This protects information in transit but does not guarantee the security of a user's device, browser, email account, network, credentials, or third-party services.

No method of transmission, storage, or online operation is completely secure. Cloud Menu cannot guarantee that unauthorized access, cyberattacks, account takeover, vulnerabilities, data loss, or a data breach will never occur.

Customers and Authorized Users are responsible for protecting their passwords, authentication methods, devices, email accounts, and networks and for promptly removing access from unauthorized users.

11. Security Incidents and Data Breaches

Cloud Menu works to prevent, detect, investigate, contain, and remediate security incidents using measures appropriate to the nature of the Services and information involved.

If Cloud Menu discovers a security incident affecting information, Cloud Menu may investigate the incident, take reasonable corrective action, cooperate with relevant service providers or authorities, and provide notices when required by applicable law.

This section does not create a guarantee that every incident will be prevented, discovered immediately, or result in an individual notice.

12. Your Privacy Choices and Rights

Depending on where you live and whether an applicable privacy law covers Cloud Menu, you may have the right to request:

• confirmation of whether Cloud Menu processes your personal information;
• access to certain personal information;
• correction of inaccurate personal information;
• deletion of certain personal information;
• a portable copy of certain personal information; or
• opt-out of sharing for cross-context behavioral advertising or targeted advertising where applicable; or
• an appeal of a denied privacy request where applicable.

Cloud Menu does not sell personal information. You may use Cookie Settings to manage Cloud Menu's nonessential analytics and advertising technologies. Where applicable law provides an additional right to opt out of sharing or targeted advertising, you may exercise it through Cookie Settings, an applicable browser-based opt-out preference signal, or by contacting us.

To submit a privacy request, contact legal@getcloudmenu.com. Include enough information to identify the relevant account or interaction and describe the request. Do not send passwords, complete payment-card numbers, government identification numbers, or other sensitive documents unless Cloud Menu specifically requests an appropriate verification method.

Cloud Menu may need to verify your identity and authority before completing a request. Cloud Menu may deny or limit a request where permitted by law, including when information must be retained for security, fraud prevention, legal compliance, recordkeeping, dispute resolution, or the rights of others.

If Cloud Menu processes information solely on behalf of a restaurant or business customer, Cloud Menu may direct the request to that customer because the customer controls the information and its use.

Cloud Menu will not unlawfully discriminate against a person for exercising an applicable privacy right.

13. Global Privacy Control and Do Not Track

Where required by applicable law, Cloud Menu recognizes applicable browser-based opt-out preference signals, such as Global Privacy Control, for Cloud Menu-controlled processing to which the signal legally applies. For example, a valid signal may disable or prevent Cloud Menu marketing-site activity that constitutes sharing for cross-context behavioral advertising or targeted advertising for that browser or device.

A browser signal may not automatically identify you across different browsers, devices, or accounts. You may also use Cookie Settings to manage available choices.

Some browsers also transmit a "Do Not Track" signal. Because there is not a universally accepted technical standard for responding to every Do Not Track signal, the Services may not respond to those signals in a uniform manner.

14. Children's Privacy

The Services are intended for businesses and are not directed to children under thirteen years of age. Cloud Menu does not knowingly collect personal information directly from children under thirteen.

If you believe a child has provided personal information to Cloud Menu, contact legal@getcloudmenu.com so we can review and, where appropriate, delete the information.

15. Third-Party Websites and Services

The Services may link to or integrate with websites, platforms, payment processors, or other services operated by third parties. Cloud Menu does not control those third parties and is not responsible for their privacy, security, or content practices. Review the privacy policies of third-party services before providing information to them.

16. Processing in the United States

Cloud Menu LLC operates from the United States. Information may be processed and stored in the United States and in other locations where Cloud Menu's service providers operate.

If you access the Services from outside the United States, your information may be transferred to jurisdictions with privacy laws different from those in your location.

17. Customer and Cloud Menu Roles

Cloud Menu determines how it processes information for account administration, security, billing, website analytics, support, and operation of its business.

When Cloud Menu processes information solely according to a business customer's instructions, the customer may be responsible for providing its own privacy notices, responding to individuals, and establishing a lawful basis for that processing. Cloud Menu's Privacy Policy does not replace a restaurant's or customer's privacy policy.

If a restaurant enables its own approved analytics or advertising integration, the restaurant controls the purposes of that integration and is responsible for the corresponding notice, consent, opt-out, and request handling. Cloud Menu remains responsible for Cloud Menu's own processing and for applying controls within the portions of the platform it operates.

18. Changes to This Privacy Policy

Cloud Menu LLC may update this Privacy Policy as its Services, providers, or legal obligations change. A revised policy becomes effective when posted unless a later effective date is stated.

Cloud Menu may provide additional notice of material changes when required by applicable law. Continued use of the Services after the effective date of a revised policy acknowledges the updated practices described in that policy.

19. Contact Us

Questions or requests concerning this Privacy Policy may be directed to:

Cloud Menu LLC
14270 SW 133rd Ave
Miami, FL 33186
legal@getcloudmenu.com