Privacy Policy

Who we are

AlaMenu (alamenu.io) is a product of Epoch AI Applications & Services L.L.C (“AlaMenu”, “we”). AlaMenu provides restaurants with digital QR menus, table reservations, and WhatsApp booking notifications. This policy explains what personal data we collect, why, and your choices. Contact: [email protected].

Data we collect

Restaurant accounts: your name, email address, password (stored as a salted hash — never in plain text), and, if you sign in with Google or Facebook, the name and email those services share with us. We never see your Google or Facebook password.

Restaurant content: menus, dishes, photos, prices, floor plans, and settings you add to your account.

Guest booking data: when a guest books a table at a restaurant using AlaMenu, we process the guest's name, phone number, optional email, party size, and booking time on that restaurant's behalf. The restaurant is the controller of its guests' data; AlaMenu processes it only to provide the reservation service.

Payments: subscription payments are processed by Stripe. Card numbers never touch our servers — we store only a Stripe customer reference, a payment method reference, and your subscription status.

Technical data: we use a session cookie strictly to keep you signed in. We do not use advertising cookies or cross-site tracking.

How we use data

To operate the service: rendering menus, managing reservations, sending booking notifications to guests by WhatsApp and email, and billing subscriptions.

To communicate service matters: booking alerts, payment receipts and failures, and important account notices. We do not sell personal data, and we do not use it for third-party advertising.

Processors we rely on

Stripe (payments), Meta / WhatsApp Business Platform (guest booking messages), Google and Meta (optional sign-in), Cloudflare (network and security), DigitalOcean (hosting), and Resend (transactional email). Each receives only the data needed for its function.

Retention & deletion

Account and restaurant data are kept while the account is active. To delete your account and its data, email [email protected] from your account email — we delete within 30 days, except records we must keep for legal or accounting reasons. Guests may request deletion of their booking data from the restaurant they booked with or from us directly.

Security & children

Data is encrypted in transit (TLS) and access to production systems is restricted. No online service is perfectly secure, but we follow current good practice. AlaMenu is a business tool and is not directed at children under 16.

Changes

We will post any changes to this policy on this page and update the date below. Material changes will be announced to account holders by email.