Privacy Policy
Effective 20 August 2026
This explains what MenuPlease collects, why, and how it is protected.
1. What we collect from restaurants
- your name, email address and password (stored hashed, never in readable form)
- your restaurant's name, address, tax rates and menu
- your orders, payments, receipts and reports — the operating record of your business
- staff names and PINs, stored hashed
2. What we collect from guests
- orders placed, and the table or takeaway details needed to serve them
- for takeaway, a name and phone number so the order can be handed over
- for guests who create an account, a name, email, password (hashed) and optional birthday, and their loyalty points
3. Card details
We never receive your card number. Card payments are processed by Bank of Maldives on their own hosted page. MenuPlease stores only the transaction reference, the amount, the currency and whether the payment succeeded. No card number, expiry date or security code ever reaches our systems or our database.
4. Why we hold it
To run the service you subscribed to: showing your menu, routing orders to your kitchen, producing your receipts and reports, and supporting you when something goes wrong. We do not sell data, and we do not share it for anyone else's advertising.
5. Who can see it
Your data belongs to your outlet. Access is checked per outlet on every request — an account belonging to one restaurant cannot read another's orders, customers or reports, whatever it asks for. Inside your outlet, what staff can see depends on their role.
6. How it is protected
- everything travels over HTTPS with modern TLS; the site is served over HTTPS only
- passwords and staff PINs are stored hashed, never in readable form, and are never returned by any API
- access is authorised per outlet on the server, not hidden in the interface
- every sensitive action — voids, discounts, drawer movements, plan changes — is written to an audit log that cannot be edited from the screen
7. How long we keep it
For as long as your outlet exists, because it is your trading record. If a subscription lapses your data is retained, not deleted. Ask us and we will export or delete your outlet's data.
8. Your rights
Ask for a copy of what we hold, ask for a correction, or ask for deletion: hello@menuplease.app.