Privacy Policy

Last Updated: May 1, 2025
1. Introduction
MenuToGo is a web application developed and maintained by Smooth Flow Tech e.U (Einzelfirma). It provides restaurants and cafés with a seamless digital menu experience via QR codes. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and Austrian privacy law (DSG).
2. Data Collection & Processing
We collect and process the following personal data:
  • Email address
  • Phone number
  • Billing and subscription details

Data Retention:
  • Data is retained until the user deletes their account.
  • Emails are stored for six months for subscription validation purposes.
3. Account Management
  • Accounts are automatically deleted one month after cancellation unless reactivated.
  • We never access user accounts without explicit permission.
  • Users are responsible for their login credentials and are advised to use strong passwords.
4. AI Integration & Data Privacy
Our AI engine helps process menu photos securely:
  • Images are processed in-memory only.
  • No data or images are stored or shared with third parties or AI training systems.
5. Subscription Plans & Cancellation
  • Monthly Plan: Renews automatically unless canceled.
  • Yearly Plan: One-time billing, deactivates at the end of the cycle.
  • One-month grace period after cancellation to allow for account reactivation.
6. User Rights under GDPR & DSG
Users have the right to:
  • Access, correct, or delete their personal data
  • Restrict or object to certain processing activities
  • Withdraw consent at any time without justification
To exercise these rights, contact us by email. We respond within 30 days.
7. Contact & Support

📧 Email: privacy@smoothflowtech.com
📞 Phone: +43 676 7622871

8. Compliance & Commitment
Smooth Flow Tech e.U. ensures full compliance with:
  • EU General Data Protection Regulation (GDPR – Regulation 2016/679)
  • Austrian Data Protection Act (DSG)
We follow best practices, including Privacy by Design, Security by Default, and regular audits to protect user data.
9. Third-Party Services
We use Stripe as our trusted third-party service provider to securely handle subscription payments and billing. All payment-related data is processed directly by Stripe and is subject to their stringent security and compliance protocols.
10. Public Menu Pages
When you build a menu, its business data — your restaurant name, business address, dishes and prices — is published on a public, search-engine-indexable page at menutogo.at/m/… so that guests and search engines can find it. This is business information, not the personal data of a natural person. You can turn search visibility off at any time with the “Show my menu in search engines” toggle in your dashboard; once disabled, the page is removed from search results on the next crawl.