Privacy Policy

1. Data controller

The data controller is Weeeb LLC, a company organized in the State of Delaware, United States, which operates the Delimenu platform.

• Registered office: 16192 Coastal Hwy, Lewes, DE 19958, United States, in care of our registered agent Harvard Business Services, Inc.
• Contact email: support@delimenu.co

The registered office is given to identify the company and to receive formal notices. To exercise your rights or make any inquiry, use the email address: it is the channel we attend to and the one against which the time limits in section 13 run.

2. Who this policy applies to

Delimenu is a tool that restaurants use to publish their menu. That is why there are two very different groups of people, and we do not have the same role toward each of them. This distinction determines whom you must contact to exercise your rights.

2.1 Data subjects with a Delimenu account

These are the owners or managers of a restaurant who create an account and publish a menu. With respect to them, Delimenu is the data controller and this policy applies in full.

2.2 Diners who visit a public menu

These are the people who open a restaurant's page to view the menu. With respect to them we process only technical and analytics data, described in section 3.

When a diner enters their name and phone number to send an order, that data does not reach any Delimenu server and is not stored in our database. It is used to compose a message that opens directly in WhatsApp and travels to the restaurant's number. The restaurant is the controller of the processing of that data, and it is the restaurant you must contact to exercise your rights over it. We explain this in detail in section 9.

3. Data we process

A clarification about location: the application does not read, store or log your IP address. It only receives a two-letter country code that the infrastructure provider calculates for us. That provider does process the IP address in order to infer it, in accordance with its own policy.

4. What we use the data for

• Create your account, authenticate you and keep you signed in.
• Publish and keep available your restaurant's menu, its images and its QR code.
• Manage the free trial and the subscription, and enable billing through Stripe.
• Send you the essential operational emails about the status of your free trial.
• Process the import of menus using artificial intelligence and keep track of the usage quota.
• Estimate the price in your local currency and preselect the country in phone number fields.
• Measure the use and performance of the site, and assess the effectiveness of our advertising.
• Diagnose failures, prevent abuse and comply with legal obligations.

We do not send marketing emails or newsletters. The only emails the platform sends are three notices about the expiration of the free trial, plus the sign-in link when you request to sign in.

5. Authorization

Authorization to process your data is given when you create the account. The registration form states that, by creating it, you accept the Terms and Conditions, this policy and the Cookie Policy. There is no separate checkbox: acceptance is part of the act of registering.

You may revoke that authorization at any time by writing to us at support@delimenu.co, with the effect described in section 11.

6. Who we share the data with

Delimenu relies on providers that process data on our behalf. We do not sell personal data or disclose it for commercial purposes unrelated to the service. This is the complete list:

We may also disclose information when required by a competent authority or a court order, and in the context of a possible corporate reorganization.

7. International transfer

Processing takes place mainly in the United States. Our database, image storage and scheduled tasks run in the us-central1 region of Google Cloud, and the providers in section 6 operate from the United States or from other jurisdictions.

If you do not reside in the United States, this means that your data leaves your country and is processed in one whose data protection legislation may differ from yours. By accepting this policy and using the platform, you authorize that international transfer, which is necessary to provide the service to you.

8. Menu import using artificial intelligence

The platform lets you upload a photo or a PDF of your menu to extract the products automatically. You should understand exactly what happens to that file:

• The file travels from your browser to our server and from there to Google's Gemini API, which performs the extraction.
• It is not saved in our image storage. The result of the extraction is held in a temporary area until you accept or discard it.
• We record usage in order to enforce the quota: user and restaurant identifier, model, type and size of the file, tokens processed and products extracted.

Bear in mind that a restaurant's menu often contains personal data of other people — phone numbers, addresses, names of staff or third-party logos — and that when you upload it that data leaves our infrastructure and is processed by Google. Before using this feature, make sure you are authorized to process the information contained in the file.

9. Orders through WhatsApp

When a diner completes an order on a menu, the application composes a message with their name, their phone number, the products chosen, their comments and the total, and opens WhatsApp with that message already written, addressed to the restaurant's number.

That message does not pass through our servers and is not stored anywhere in Delimenu. There is no database of orders or of end customers. The cart lives only in the diner's browser and is cleared when the order is sent.

Accordingly, the processing of that data remains between the diner, the restaurant and WhatsApp, which is a Meta service governed by its own terms. If you are a diner and want to exercise rights over an order you sent, you must contact the restaurant: we do not have that information and cannot retrieve it.

10. Cookies and local storage

We use the browser's local storage to maintain your session, your cart and your preferences, and third-party tools to measure the use of the site and the effectiveness of our advertising.

The analytics and advertising ones are loaded only if you accept them, and you can change that decision at any time. The full detail, with the exact list of each technology and the control to accept or reject them, is in our Cookie Policy.

11. Retention and erasure

We retain your data while your account is active and for as long as necessary to comply with legal and accounting obligations.

We want to be precise on a point that is usually left hidden: deleting a restaurant from the dashboard is a soft delete. The menu stops being available to the public and its address is released, but the record, its images and the usage records of the AI import remain in our database.

If you want the permanent erasure of your data, write to us at support@delimenu.co from the email address associated with your account. We will handle the request within a maximum of fifteen (15) business days, unless there is a legal duty to retain certain information, in which case we will tell you which information and for how long.

Erasure entails canceling the account and losing access to the published menus. Data already held by Stripe is governed by Stripe's own retention periods, subject to the accounting and tax rules that apply to it.

12. Security

We apply the following specific measures, which you can verify in the behavior of the product:

• All traffic travels encrypted over HTTPS.
• The database rules restrict reading and writing of each restaurant to its owner, and are enforced on the server, not in the browser.
• Sensitive operations verify your identity on the server before they run.
• We do not store passwords, because the system does not use them, or card details.
• The internal processes that update the menus authenticate with a shared secret.

No system is invulnerable. If we detect an incident that affects your personal data, we will inform you and report it to the competent authority where applicable.

13. Your rights

We recognize the following rights over your personal data, wherever you live and regardless of the law that governs the contract:

• Know what data of yours we process and access it free of charge.
• Update and rectify data that is partial, inaccurate or incomplete.
• Request the erasure of your data, on the terms of section 11.
• Revoke the authorization given for the processing.
• Be informed about the use we have made of your data.
• Object to certain processing, such as the advertising measurement described in the Cookie Policy.
• File a complaint with the data protection authority of your country of residence.

13.1 How to exercise them

Write to us at support@delimenu.co from the email address associated with your account, stating your request. We undertake to respond within a maximum of fifteen (15) business days. If the request is complex and we need more time, we will tell you so within that period and explain the reason.

You can exercise many of these rights yourself, immediately, from the dashboard: edit your restaurant's data, modify or delete products, and manage or cancel your subscription.

13.2 Additional rights depending on your country

The data protection rules of your country of residence may grant you rights in addition to those on this list, or shorter time limits. Nothing in this policy limits those rights: if your local law gives you more, your local law prevails. Write to us and we will process it.

14. Minors

The platform is intended for persons of legal age who manage a business. We do not knowingly collect data from minors. If you find that a minor has created an account, write to us and we will proceed to delete it.

15. Links to third-party services

Our site links to external services such as the feedback and roadmap platform, the service status page, our social media accounts and the occasional commercial referral link. By following them you leave Delimenu and become subject to the policies of those third parties, over which we have no control.

16. Changes to this policy

We may update this policy when the platform or the applicable rules change. The date of the last update appears at the beginning of the document. If the change is material and affects the purpose of the processing, we will notify you by email or through a visible notice on the platform before it takes effect.

17. Contact

For any question about this policy or about the processing of your data, write to us at support@delimenu.co.