Last updated: February 23, 2026
MenuMadeMagic ("we," "us") is operated by Griffin Velichko from Vancouver, British Columbia, Canada. This policy explains what data we collect, how we use it, and your rights.
The short version: we collect what we need to run the service, we don't sell your data, and we use trusted third-party providers to process payments and host your content.
When you sign up, we collect:
When you create a menu, you provide:
This data is stored to display your published menu and is visible to anyone who visits your menu page.
Payments are processed by Stripe. We never store your credit card number, CVC, or full billing details on our servers. Stripe handles all payment data under their own privacy policy and PCI-DSS compliance. We only store your Stripe customer ID to manage your subscription.
When someone views a published menu, we collect anonymous analytics:
| Data | Purpose |
|---|---|
| Visitor hash (anonymized, rotates daily) | Unique visitor counts without tracking individuals |
| Device type (mobile/desktop/tablet) | Help you understand how customers view your menu |
| Country and city (from IP, via Cloudflare) | Geographic insights |
| Referrer URL | Understand where traffic comes from |
| Section dwell time | Show which menu sections are most popular |
| View timestamp | Peak hours and daily trends |
We do not store IP addresses. Visitor identity is hashed with a daily-rotating salt, making it impossible to trace views back to individual people.
If you enter your email on our signup page before completing registration, we store it to follow up with you about completing your account. You can request removal at any time.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
We use the following services to operate MenuMadeMagic:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, database, file storage | Account info, menu data, photos |
| Stripe | Payment processing | Email, payment details |
| Cloudflare | Hosting, CDN, DDoS protection | Request metadata (IP, headers) |
| Google (Gemini AI) | Photo-to-menu text extraction | Menu photos (when you use AI parsing) |
Each provider operates under their own privacy policy and data protection standards.
We use minimal cookies:
We do not use third-party tracking cookies, advertising pixels, or analytics services like Google Analytics.
You have the right to:
To exercise any of these rights, email us at info@menumademagic.com.
As a Canadian business, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect personal information only for identified purposes, with your knowledge and consent. You may withdraw consent at any time by closing your account or contacting us.
If you are located in the European Economic Area (EEA) or other jurisdictions with data protection laws, please note that your data is processed and stored in the United States and Canada. By using MenuMadeMagic, you consent to this transfer. We process your data based on contractual necessity (providing the service you signed up for) and legitimate interest (improving the platform).
MenuMadeMagic is designed for business use by restaurant owners and operators. We do not knowingly collect data from anyone under the age of 16. If you believe a child has created an account, please contact us and we will delete it promptly.
We may update this privacy policy from time to time. If we make significant changes, we'll notify you via email or through the platform. The "last updated" date at the top will always reflect the most recent version.
Questions or concerns about your privacy? Reach us at:
info@menumademagic.com
MenuMadeMagic · Vancouver, BC, Canada