Payment Security

Effective 20 August 2026

How card details are handled when you pay for a subscription.

1. Your card number never reaches us

Paying opens a hosted payment page belonging to Bank of Maldives. The card number, expiry date and security code are entered there and are transmitted to the bank, not to MenuPlease. We cannot see them, and there is nowhere in our system for them to be stored.

2. What we store

The bank's transaction reference, the amount, the currency, the date, and whether the payment was confirmed. That is what appears on your billing history.

3. In transit

Every page and every API call is served over HTTPS with modern TLS. The site does not accept unencrypted connections.

4. Confirming a payment

A payment is recorded only when the bank tells us so through a signed webhook, and even then we re-query the bank's API to confirm the state before activating anything. Returning to our site from the payment page proves nothing on its own and never activates a subscription by itself.

5. Keep your records

We recommend you retain a copy of your transaction record and of our policies. Your billing history is in the dashboard under Billing, and your bank statement is the independent record.