Privacy Policy
Introduction
This Privacy Policy explains how Peek-a-Menu ("we," "our," or "us") collects, uses, and protects your personal information when you use our service. We are committed to protecting your privacy and ensuring your data is handled responsibly.
Information We Collect
Account Information
When you create an account, we collect your email address and a hashed version of your password. We never store plain-text passwords.
Menu Data
We store the menu content you create, including item names, descriptions, prices, dietary tags, categories, images, and branch information.
Analytics Data
When visitors view your menu, we may collect anonymized analytics data including hashed IP addresses, referrer URLs, and timestamps. This data is aggregated and does not identify individual visitors.
Payment Information
All payment processing is handled by Polar.sh. We do not store, process, or have access to your credit card details. Polar.sh provides us with a token that confirms successful payment and subscription status.
How We Use Your Information
- To provide, maintain, and improve our service
- To process payments through our payment partner
- To send transactional emails (account confirmations, billing receipts)
- To generate anonymous, aggregated analytics
- To detect and prevent fraud or abuse
Data Storage and Security
- Database: Your data is stored in a PocketBase database hosted on Hetzner servers in the European Union.
- Images: Menu photos and assets are stored on Cloudflare R2 object storage.
- Backups: Automated database backups via Litestream ensure your data is protected against hardware failure.
- Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS (TLS 1.3).
Third-Party Services
We use the following third-party services to operate our platform. Each has its own privacy policy:
- Polar.sh — Payment processing
- Resend — Transactional email delivery
- Cloudflare — CDN, DNS, and R2 object storage
- Sentry — Error tracking and monitoring
- UptimeRobot — Uptime monitoring
Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Request deletion of your personal data.
- Portability: Receive your data in a structured, commonly used format.
- Withdraw consent: Withdraw previously given consent at any time.
To exercise any of these rights, email us at privacy@peekamenu.com.
Cookies
Essential cookies: We use a session cookie to keep you logged in. This cookie is necessary for the service to function and cannot be disabled.
Analytics cookies: With your consent, we use analytics cookies to understand how our service is used. You can opt out at any time.
Data Retention
- Account data: Retained for as long as your account is active.
- Menu data: Retained for as long as your account is active.
- Analytics data: Retained for 90 days, then automatically deleted.
- Backups: Retained for 30 days on a rolling basis.
When you delete your account, all associated data is permanently removed from our systems within 30 days.
Contact Information
If you have questions about this policy or want to exercise your data rights, contact us at:
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. Continued use of the service after changes constitutes acceptance of the updated policy.