MenuCraft (“we”, “us”) operates MenuCraft, a platform that lets restaurants in India publish digital menus that guests open by scanning a QR code. This policy explains what personal data we collect, why, and the choices you have, in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Restaurant owners and their staff
When you create an account we collect your name, email address, mobile number, restaurant details (name, address, cuisine, contact numbers, logo and photos) and, if you add them, billing name and GSTIN. We use this to provide the service, send account and billing emails, issue GST invoices and give support. Passwords are stored only as secure one-way hashes.
2. Guests viewing a menu
Guests do not need an account and we do not ask for their name, phone number or email. To show restaurants how often their menu is viewed we count visits per day using a small first-party cookie that only records the date of the last visit. Dishes a guest marks as favourites and the “add to home screen” preference are stored on the guest’s own device and are never sent to us. We do not use advertising or cross-site tracking cookies.
3. Payments
Subscription payments are processed by Razorpay Software Pvt Ltd. Card, UPI and bank details are entered on Razorpay’s secure checkout and are not received or stored by us. We keep a record of the amount, date, plan and Razorpay payment reference for accounting and tax purposes.
4. Logs and security
For security we record sign-ins, failed sign-in attempts, the IP address and browser type used, and important account actions (such as publishing a menu or changing settings). These records help us detect misuse and are kept for up to 12 months unless needed longer by law.
5. Sharing
We do not sell personal data. We share it only with service providers that help us run the platform (hosting, email delivery, payment processing) under confidentiality obligations, or when required by law. Information a restaurant publishes on its menu (address, phone, photos) is public by design.
6. Retention
Account data is kept while your account is active. If you close your account we delete or anonymise personal data within 90 days, except invoices and payment records, which we keep for the period required under Indian tax law (currently 8 years).
7. Your rights
You can access and correct most of your information yourself in the dashboard. You may also ask us to provide a copy of your data, correct it, or erase it, and you may withdraw consent for optional communications at any time. Contact us at info@skwebdevelopers.com. We aim to respond within 30 days.
8. Children
The platform is intended for businesses. We do not knowingly collect personal data from children.
9. Changes
If we make material changes we will notify account holders by email or in the dashboard before they take effect.
10. Contact & grievance officer
Questions or complaints about privacy can be sent to info@skwebdevelopers.com.