This translation is provided for convenience. In case of differences, the Italian version prevails.
1. Who processes the data
The data controller for the Menuvola service (website, menu pages and app) is Ivan Paglialonga, [indirizzo da completare]. For any privacy question write to info@menuvola.it. No data protection officer (DPO) has been appointed, as it is not required for this activity.
2. Restaurants and guests: who decides what
Menuvola is a tool that restaurants use to publish their menu and manage table orders. That is why there are two roles:
Restaurant owners' data (those who sign up and use the dashboard): Menuvola is the controller. We use it to provide the service, manage the subscription and support.
Restaurant guests' data (those who open the menu from the QR code, order, call the waiter or ask for the bill): the restaurant is the controller, because it decides how to use the service; Menuvola processes this data on behalf of the restaurant, as processor (Art. 28 GDPR), under the terms of service accepted by the restaurant. To exercise your rights as a guest you can contact the restaurant or write to us: we will forward the request.
Guests do not need to register or give their name, email or phone number to view the menu or order.
3. What data we process, why and on what basis
| Who | Data | Why | Legal basis |
|---|---|---|---|
| Restaurant owners | Venue name, email, password (stored only in hashed form), logo, menu, photos, 3D models, settings, staff (name and hashed PIN). | Create the account and provide the service. | Contract (Art. 6.1.b) |
| Subscription: Stripe customer and subscription IDs, status, renewal dates, invoice amounts. We neither see nor store card details. | Manage payments and accounting. | Contract; legal obligation for tax records (Art. 6.1.c) | |
| Technical access data: device used to log in, date of last access, hashed fingerprint of the IP address for login attempts and sign-up, how many AI features were used. | Security (blocking repeated attempts, abuse), plan limits, internal statistics. | Legitimate interest (Art. 6.1.f) | |
| Service emails (account confirmation, payment notices). | Communications needed for the service. | Contract | |
| Restaurant guests (on behalf of the restaurant) | Orders (dishes, notes such as “no cheese”), table number and number of people, bill or waiter requests, a random phone identifier for the table's shared cart, chosen language. | Show the menu, send orders to the kitchen, prepare the bill. | Contract between guest and restaurant; for Menuvola, the restaurant's instructions |
| If the guest accepts notifications in the app: a device code for notifications and the language. | Send the restaurant's news and daily specials. | Consent (Art. 6.1.a), revocable in the phone settings | |
| Everyone | Counts of menu visits per day, channel (app or browser), device type, language and hour. Aggregated numbers only: they contain no IP or personal identifier. | Service statistics for restaurants and Menuvola. | Legitimate interest |
| People who write to us | Name, email and message from the contact form or emails. | Reply. | Request of the data subject / legitimate interest |
We do not use data for advertising profiling, we do not sell it and we do not make automated decisions with legal effects on people.
4. Artificial intelligence
Some features use third-party artificial intelligence services. They receive only the content needed for the feature requested by the restaurant:
- Menu import and AI style: photos of the menu pages, the logo, inspiration photos and the venue description are sent to Anthropic (Claude) to read the dishes or propose styles.
- Illustrative photos and backgrounds: the dish name, description and ingredients, or the background description, are sent to Google (Gemini) to create the image.
- 3D models: photos of the dish are sent to Meshy to create the model.
- Translations: menu and notification texts are sent to DeepL.
We use the paid (API) versions of these services; under their commercial terms, the content sent is not used to train the models. Advice for restaurants: do not photograph people or documents containing personal data together with the menu or dishes. AI-created images are shown to guests as “Illustrative photo”.
5. Who we entrust the data to
Data is processed by us and by providers that help us deliver the service, appointed as processors or acting as independent controllers for their own services:
| Provider | Service | Where |
|---|---|---|
| Aruba S.p.A. | Hosting of the website, database and files, email | Italy |
| Stripe Payments Europe Ltd. | Subscription payments | Ireland (EU) and USA |
| Anthropic PBC | Menu reading and style proposals (Claude) | USA |
| Google (Gemini API, Google Fonts, reCAPTCHA) | AI images; fonts; contact form protection | EU and USA |
| Meshy | 3D model creation | outside the EU |
| DeepL SE | Text translation | Germany (EU) |
| Expo (650 Industries Inc.), Apple, Google | App push notifications | USA |
| jsDelivr / Cloudflare | Delivery of the 3D viewer and website libraries | EU and USA |
Advisers (e.g. our accountant) may also access the data for legal obligations, as well as authorities where required by law.
6. Transfers outside the European Union
When a provider processes data outside the EU (for example in the USA), the transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework, for participating providers) or on the standard contractual clauses approved by the Commission, with the additional measures provided by the provider. You can ask us for a copy of the safeguards adopted.
7. How long we keep the data
- Restaurant account and menu content: as long as the account is active. When it is closed, they are deleted within 30 days (menu, photos, 3D models, orders, staff), except as follows.
- Billing data: 10 years, as required by tax law.
- Orders, tables and bills: as long as the restaurant keeps them in its history, and in any case no longer than the closure of its account.
- Logins: login attempts after 24 hours; sessions expire after 90 days.
- Log of AI usage and dashboard use: up to 24 months.
- Notification codes: until the guest turns off notifications or uninstalls the app.
- Aggregated statistics: without limit, since they cannot be linked to people.
8. Cookies and browser storage
Menuvola does not use profiling cookies or third-party analytics tools (such as Google Analytics). That is why there is no banner asking you to accept them.
| What | Purpose | Duration |
|---|---|---|
| Session cookie (website reserved area) | Keep the restaurant owner logged in | Until the browser is closed |
Browser local storage: ms.token | Access to the web dashboard (app/admin) | Until logout or expiry (90 days) |
Local storage: ms.deviceId, cart and table session | Shared cart, table PIN, orders | Until the table is closed or the browser is cleared |
| Local storage: preferences (language, side menu, guide already seen) | Remember your choices | Until the browser is cleared |
These are technical tools necessary for the requested service and do not require consent. Some pages load third-party resources that may receive your device's IP address: Google Fonts, the 3D viewer (from jsDelivr) and, only on the contact page, Google reCAPTCHA, which blocks automated messages and may use Google's own cookies (Google privacy policy).
You can delete cookies and local storage from your browser settings at any time.
9. Security
We protect data with appropriate technical and organisational measures: HTTPS encrypted connections, passwords and PINs stored only in hashed form, access codes stored as hashed fingerprints, IP addresses stored only as fingerprints, limits on login attempts, separation of each restaurant's data, checks on uploaded files. In the event of a data breach that may pose risks to people, we will notify the Italian Data Protection Authority and, where required, the data subjects and the restaurants involved.
10. Your rights
You can ask at any time to access your data, correct it, delete it, restrict its use, receive it in a readable format (portability), object to processing based on legitimate interest and withdraw consent given (e.g. for notifications) without affecting earlier processing.
Write to info@menuvola.it: we reply within one month. Restaurant owners can also use this address to close their account and delete all data.
If you believe the processing is not correct, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of the EU country where you live or work.
The service is aimed at restaurants; guests do not need to register to order at the table.
11. Changes to this policy
We may update this page when the service or the law changes. Significant changes will be communicated to restaurant owners by email or in the app. The date of the last update is shown at the top.