Privacy Policy

Last updated: November 4, 2026

This Privacy Policy explains how Kimvix L.P., trading as Menumou ("we", "us", "our"), with registered address at Alexandrou Palli 3, 45332 Ioannina, Greece (G.E.MI. 184873129000, A.F.M. 802898663), the operator of menumou.eu, collects, uses and protects your personal data when you submit your information through our Facebook/Instagram lead generation ads, create and use a Menumou account, or connect Menumou to ChatGPT (the "Connector").

1. Data we collect

Lead forms. When you fill in a lead form on Facebook or Instagram, we collect the information you provide to us:

Full name
Email address
Phone number

Menumou account. When an account is created (via a magic-link email or Google sign-in) we store:

Email address
Name and profile picture, only when you choose to sign in with Google
Preferred language and sign-in timestamps
A password, only if you set one, stored solely as a salted, memory-hard hash

Menu data. The menus you create and their settings: subdomain, business name, contact email, categories, products, descriptions, prices, images and call-the-waiter settings.

Connector data. If you connect Menumou to ChatGPT you authorize it to access the structured menus owned by your account. Section 3 describes exactly what we store for that connection.

2. How we use your data

To provide and host your digital menu and ordering pages.
To authenticate you (magic link, Google, or a password you set) and keep your session secure.
To let the Connector read and update your structured menus when you ask ChatGPT to do so.
To contact you by email or phone about our products and services when you submit a lead form.
To keep the service secure, prevent abuse, and meet our legal obligations.

We will never sell, rent or share your personal data with third parties for their own marketing purposes, and we do not use your menu data for advertising.

3. Menumou for ChatGPT (the Connector)

When you connect Menumou to ChatGPT you approve an OAuth authorization for the structured menus owned by your account, limited to the permissions you grant (menu:read and menu:write). The Connector keeps no separate copy of your menus: it reads and updates the menus in your Menumou account, and nothing else.

For each connection we store:

An OAuth connection record: which Menumou account it belongs to, the client (ChatGPT), the granted permissions, and the authorization and revocation timestamps.
A cryptographic hash of the refresh token. The refresh token itself is never stored.

Authorization codes are stored only as hashes and expire after 10 minutes. Access tokens are short-lived signed tokens valid for 1 hour and are not stored on our servers. Refresh tokens are stored only as hashes, expire 60 days after issue, and are revoked immediately when you revoke access or when a token theft is detected.

Data sharing. When you use the Connector, the menu data you ask ChatGPT to read (or the changes you ask it to make) is transmitted to OpenAI as part of your request and is processed under OpenAI's own privacy policy. We do not share menu data with anyone else for the Connector, and we never sell it.

Revoking and deleting the connection. You can revoke access at any time from your Menumou Profile or the ChatGPT page, or by emailing us. Revocation takes effect immediately: the refresh tokens are revoked and the Connector can no longer reach your menus. After revocation the connection record is kept only as an audit trail and is deleted automatically after 90 days.

4. Legal basis

We process your data on the following legal bases:

Performance of a contract (Article 6(1)(b) GDPR) to create and operate your account, your menus and the Connector.
Consent (Article 6(1)(a) GDPR) for lead-form contact and for connecting ChatGPT. You can withdraw your consent at any time by revoking the connection or contacting us.
Legitimate interests (Article 6(1)(f) GDPR) to keep the service secure and prevent abuse.
Legal obligation (Article 6(1)(c) GDPR) where we must keep records, for example tax and invoicing data.

5. Who has access to your data

Your data is accessible only to the Kimvix L.P. (Menumou) team members responsible for operating the service. We use the following service providers, each under a data processing agreement where required:

OpenAI (ChatGPT) — receives the menu data you access through the Connector, only when you use it and only for the menus you own.
Fly.io — application hosting.
Heroku — application hosting.
Google Cloud — image and file storage.
Resend — transactional email (sign-in links and notifications).
OpenRouter — optional AI menu translation, only when you use that feature.
Revolut — card payments, when you pay for a plan.
Meta Platforms (Facebook/Instagram) — the platform that collects lead-form data and processes it under its own Privacy Policy.

We never sell, rent or share your personal data with third parties for their own marketing.

6. How long we keep your data

Menu and account data: while your account is active. If you ask us to delete your account, we delete the account and its menus within 30 days, except records we must keep for tax or other legal reasons.
Lead-form contact data: for as long as needed to discuss our solutions with you and, if you become a customer, for the duration of our business relationship. If no business relationship is established, we delete it within 12 months.
Connector authorization codes (stored as hashes): deleted automatically 10 minutes after they are issued.
Connector refresh tokens (stored as hashes): deleted automatically 60 days after they are issued, and revoked immediately when you revoke access.
Connector connection records: kept while the connection is active; after revocation they are deleted automatically after 90 days.
Access tokens: valid for 1 hour and not stored on our servers.

7. Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten"), including your account, its menus and the Connector's access
Withdraw your consent at any time
Object to or restrict the processing of your data
Receive your data in a portable format
Lodge a complaint with your local data protection authority

To exercise any of these rights, including deleting your account and menus or the Connector's access, contact us at [email protected] and we will respond within 30 days.

8. Data security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Passwords are stored only as salted, memory-hard hashes; Connector authorization codes and refresh tokens are stored only as hashes; Connector access tokens are short-lived; and traffic to the service is encrypted in transit.

9. International transfers

Some of our service providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at menumou.eu/privacy-policy.

11. Contact

For any question about this Privacy Policy or how we handle your data, contact us at:
Kimvix L.P. (Menumou), Alexandrou Palli 3, 45332 Ioannina, Greece — [email protected]