This Privacy Policy explains what personal data we collect when you use QRMenu.link, why we collect it, and what rights you have. This policy is published in English and applies to all language versions of our website.
QRMenu.link is a service operated by:
Vera Support LLC
1209 Mountain Road Pl NE, Ste N
Albuquerque, NM 87110, United States
Email: [email protected]
For data protection purposes, Vera Support LLC is the data controller for the personal data described in this policy.
We deal with two different groups of people, and we treat their data very differently:
| Data | Why we need it |
|---|---|
| Business name, email address, phone number (optional) | To create your account, publish your menu and contact you about your service |
| Password (stored only as a secure one-way hash) | To let you sign in. We never store or see your actual password |
| IP address at sign-up | Security and abuse prevention (for example, limiting automated sign-ups) |
| Subscription and billing status, Stripe customer and subscription identifiers, renewal dates | To manage your subscription. We never receive or store your card details — see section 5 |
| The menu content you upload (item names, descriptions, prices, photos, allergens, translations) | To publish and display your menu. This is your business content, not personal data about you |
| Support messages you send us | To answer your question and keep a record of the request |
| Sign-in timestamps | Account security and support |
When a guest scans a QR code and opens a menu, we do not ask for, collect or store any personal information about them. There is no login, no account and no profiling.
We only keep anonymous, aggregated counts so a restaurant can see how often its menu was opened. To count unique visits without identifying anyone, an IP address is converted into an irreversible hash using SHA-256 with a secret salt, and only a shortened version of that hash is stored. Raw IP addresses of menu visitors are never stored, and the stored value cannot be turned back into an IP address or used to identify a person.
Automated traffic (bots and crawlers) is filtered out of these counts.
Payments are processed by Stripe. When you subscribe, you are taken to a payment page hosted by Stripe and you enter your card details there. Card numbers, security codes and similar payment credentials are never sent to, processed by or stored on our servers.
Stripe provides us with information needed to run your subscription — such as a customer identifier, subscription status, renewal date and the outcome of a payment. Stripe processes your data as an independent controller under its own privacy policy: stripe.com/privacy.
We use a small number of cookies:
| Cookie | Purpose |
|---|---|
site_lang | Remembers the language you selected on the website (30 days) |
panel_lang | Remembers the language you selected inside your management panel |
qm_menu | Set during sign-up so that, after payment, we can show you your own menu address (2 hours) |
| Session cookie | Keeps you signed in to your panel |
We also use Google Analytics 4 and the Meta (Facebook) pixel on our marketing website to understand how visitors find us and whether our advertising works. These services may set their own cookies and process data outside the EU. Where your local law requires consent for such analytics and advertising cookies, you can withhold or withdraw it using your browser settings or the opt-out tools those providers offer.
Menu pages that your guests see do not carry advertising or profiling cookies.
We only share data with providers that help us operate the service, and only to the extent needed:
| Provider | Used for |
|---|---|
| Stripe | Payment processing and subscription billing |
| Brevo | Sending account and service emails |
| Cloudflare | Content delivery, DNS and protection against attacks |
| UpCloud | Server hosting (Frankfurt, Germany) |
| Google (Analytics, Fonts) | Website statistics and web fonts |
| Meta | Advertising measurement on our marketing website |
| OpenAI, Google (Gemini), DeepSeek | AI features — only when you choose to use them (see section 8) |
| Pexels, Unsplash | Optional stock photography suggestions for menu items |
| Vera Support | The live chat widget on our website |
We do not sell personal data, and we do not share it for third-party advertising.
Some optional features use artificial intelligence — for example, creating a menu from a photo or PDF, suggesting allergen and calorie information, or translating your menu. These run only when you actively start them.
When you do, the relevant content (such as the menu image you upload or the item names to be translated) is sent to our AI provider to produce the result. We do not send your customer account details, billing data or your guests' data to AI providers.
Our servers are located in Frankfurt, Germany (European Union). Some of our service providers listed above are based in the United States or process data internationally; where that happens, transfers are covered by the safeguards those providers offer, such as the European Commission's standard contractual clauses.
All traffic is encrypted with HTTPS. Passwords are stored only as salted one-way hashes. Access to our administration tools is restricted, payment data never touches our servers, and system logs are kept outside the public web root. No system can be guaranteed to be perfectly secure, but we take these measures seriously and review them regularly.
Depending on where you live — and in particular if you are in the European Union or the United Kingdom under the GDPR — you have the right to:
To exercise any of these rights, write to [email protected]. We will respond within 30 days. We may need to verify your identity before acting on a request.
QRMenu.link is a business service. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.
If we make significant changes, we will update the date at the top of this page and, where appropriate, notify customers by email. Continuing to use the service after a change means you accept the updated policy.
Questions about privacy? Email [email protected] or write to Vera Support LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA.