Privacy Policy
Last updated: April 2025
1. Information we collect
We collect information you provide when you create an account, build your menu, or contact us. This includes your email address, business name, menu content (items, prices, images, descriptions, location, hours), and billing information processed through Stripe.
When you visit the platform, we may collect standard server logs including IP address, browser type, and pages visited, used solely for security and performance monitoring.
2. How we use your information
We use the information we collect to provide and operate the service, send account-related communications, process payments, and improve the platform. We do not sell your personal data to third parties.
3. Public menu pages
Menu pages you create at 1food.menu/@[your-slug] are publicly accessible by default. This includes your business name, menu items, prices, location, contact information, opening hours, and any photos you upload. Make sure you are comfortable with this information being publicly visible before publishing.
4. Data storage
Your data is stored securely using Supabase (PostgreSQL database hosted on AWS infrastructure). Media files are stored on BunnyCDN. Data may be replicated or cached for performance and reliability.
5. Authentication
Account login and session management are handled by Supabase Auth. We use secure HTTP-only cookies to maintain your session. We do not store passwords in plain text.
6. Payments
Billing for paid plans is processed by Stripe. We do not store your full payment card details. Stripe's privacy policy applies to information you provide during checkout.
7. Cookies and advertising
We use essential cookies for authentication and session management. Public menu pages for vendors on the Free plan may display advertisements served by Google AdSense. AdSense uses cookies and similar technologies to serve personalised ads based on your browsing behaviour. You can opt out of personalised ads via Google's ad settings. Vendors on Pro or Business plans do not have ads on their pages.
8. Third-party services
The platform integrates with the following third-party services:
- Supabase - database and authentication
- Stripe - payment processing
- BunnyCDN - media storage and delivery
- Google AdSense - advertising on free-tier vendor pages
- OpenStreetMap / Google Maps - location maps on vendor pages
Each of these services operates under its own privacy policy.
9. Data retention
We retain your data for as long as your account is active. If you delete your account, your personal data and menu content will be removed within 30 days, except where retention is required by law (e.g. billing records).
10. Your rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us at support@1food.menu. You may also delete your account directly from the dashboard.
11. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes via email or a notice in the dashboard.
12. Contact
Questions about this policy? Contact us at contact@1food.menu.