Privacy Policy

Account and profile information

We process your email address when you create an account, together with business names, descriptions, links, images, menu content, themes, and settings you choose to publish. Google sign-in supplies only the basic account information permitted by that authentication flow.

Contact form records

When a visitor uses a business contact form, we may store their name, email, message, and any enabled phone, company, or custom answer fields. These records are shown to the relevant business account in its dashboard.

Product analytics

On public profiles and menus, we may record the type and time of views, link or menu-item clicks, QR visits, filter use, and feedback, together with the related link or item identifier. Some events carry limited metadata such as language, arrival source, or feedback choice.

Raw IP addresses, browser user-agent strings, and referring-page URLs are not stored with analytics events. To limit abuse and deduplicate short-term repeats, we use irreversible, secret-keyed, time-windowed anonymous hashes.

Site analytics and cookies

Vercel Analytics provides aggregate, cookie-free site measurement. Google Analytics loads only after you accept analytics in the cookie preference panel. We do not send names, emails, phone numbers, or private menu data to Google Analytics.

Payments and technical logs

Paddle processes subscription payments as Merchant of Record; Qenvario does not receive card numbers or payment credentials. Hosting and security providers may process standard network and security logs to operate the service.