Last updated 5 August 2026

Privacy

I'm Anthony. I run MenuPipe (menupipe.app) as a sole trader in Melbourne, Australia. There's no data team here — it's me, so I can tell you exactly what happens to your information.

Short version: I collect the little I need to publish your menu and bill you $25 a month. I don't sell it, I don't run ads against it, and you can have all of it back or deleted whenever you ask.

What I collect

• Your email and name — so I can send you the Friday heartbeat, drift alerts, and reply when you email me. Plus your venue name, address and phone, because those go on the menu page itself.
• Your menu — items, prices, descriptions, hours. That's the product. It lives in a file I keep for your venue, and most of it is meant to be public: it's the menu on your wall.
• Billing details — handled by Stripe. I see your email, whether the subscription is active, and the last four digits on the receipt. I never see your card number. It goes straight from you to Stripe and never touches my systems.
• Basic page counts — how many times your menu page was opened and your QR codes scanned, so the Friday email has real numbers in it. Counts, not profiles: I'm not tracking your customers around the internet.
• Standard server logs — my host (Vercel) records IP addresses and requests for a short window, the way every web host does. I don't mine them.

What I don't do

• I don't sell your data or your customers' data. Not to anyone, not ever.
• I don't run ads, ad pixels, or advertising trackers on your menu page.
• I don't sell or share aggregate pricing data about your venue with your competitors.
• I don't ask for, store, or log in with your Uber Eats or DoorDash passwords. Those stay yours — I send you a change list, or a browser helper fills the fields in your own dashboard while you're watching.
• I don't touch orders or payments from your customers. That's not what this is.

Who else touches it

Four companies, each doing one job: Stripe (payments), Vercel (hosting your menu page), Google (only if you connect your Business Profile — see below), and my email provider (to actually send you email). Some of them store data overseas, mostly in the US. That's unavoidable for a business this size, and I'd rather say so than bury it.

Google Business Profile

This one isn't built yet — I'm writing it down now so it's not a surprise later. When it ships, you'll be able to connect your Google Business Profile so your menu updates there too. If you do:

• Google asks you for permission, on Google's own screen. I never see your Google password.
• I receive an access token, stored encrypted, used for exactly one thing: writing your menu to your own Business Profile listing.
• I only request the narrowest permission that does that job. I don't read your Gmail, your Drive, your contacts, or your reviews.
• I don't use anything from Google to train AI models, build advertising profiles, or sell to anyone.
• You can disconnect anytime — from inside MenuPipe or from your Google account permissions page. Revoke it and I delete the token. Cancel MenuPipe and the token is deleted with the rest of your data.

The formal version Google requires me to state: MenuPipe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

The menu pages don't set tracking cookies at all. The main site sets nothing beyond what's needed to make it work, and Stripe sets its own during checkout to process the payment and stop fraud. There's no cookie banner because there's nothing to consent to.

How long I keep things

Your menu and account stay while you're a customer. Cancel and your menu page stays up for 30 days so nobody scans a dead QR code, then I delete your data within 60 days — except invoices, which Australian tax law makes me keep for five years. Ask me to delete everything sooner and I will.

Getting your data

Email me and I'll send your full menu as a spreadsheet and print files, or delete the lot — usually same day, and always within 30 days. No forms, no retention call, no "are you sure" gauntlet. If you think I've got something wrong about you, tell me and I'll fix it.

If I ever handle this badly, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). I'd rather you emailed me first, but that's your right and you should know it exists.

Breaches

If something leaks and it could cause you harm, I'll tell you directly and quickly — not a footnote in a newsletter three months later — and notify the OAIC where the law requires it.

Changes

If I change this page in a way that actually matters, I'll email you rather than quietly editing the date at the top.

Contact

hello@menupipe.app. It reaches me, not a ticket queue.