Privacy Policy

Last updated: 2025-01-30

1. Introduction

This Privacy Policy explains how Menudo ("we," "us," "our") collects, uses, and protects your personal data when you use our service. We are committed to protecting your privacy and handling your data in an open and transparent manner.

2. Data Controller

Menudo
Dennis Bochen
Email: support@menudo.io

3. Personal Data We Collect

3.1 Data You Provide

• Email address (for account registration)
• For subscribers: Name and billing address (processed through Stripe)
• Support queries and communication data when you contact our customer service (processed through Intercom)

3.2 Automatically Collected Data

• System logs for service maintenance and security
• Analytics data through Mixpanel about how you use our service
• Technical information necessary for the service to function

4. Sub-processors and Third-Party Service Providers

We use various third-party service providers (sub-processors) to help us provide our service. All our sub-processors have entered into data processing agreements with us that ensure they process your data in accordance with GDPR and applicable data protection laws.

4.1 Current Sub-processors

Infrastructure & Hosting

Sub-processor	Purpose	Location
Supabase	Database and infrastructure	EU/EEA
Vercel	Application hosting	EU/EEA

Payment Processing

Sub-processor	Purpose	Location
Stripe	Payment processing	United States

Communications

Sub-processor	Purpose	Location
Resend	Transactional emails	United States
Intercom	Customer support	United States

Analytics & Monitoring

Sub-processor	Purpose	Location
Mixpanel	Product analytics	United States

4.2 Sub-processor Updates

We may update our sub-processors from time to time. If you would like to be notified of any changes to our sub-processors, please email us at support@menudo.io.

4.3 Security and Compliance

All our sub-processors have been selected based on their:

• Compliance with GDPR and applicable data protection laws
• Implementation of appropriate technical and organizational security measures
• Reputation and reliability in their respective fields

5. How We Use Your Data

We use your personal data for:

• Providing and maintaining our service
• Processing your payments (through Stripe)
• Sending service-related communications
• Analyzing service usage to improve our offerings
• Ensuring security of our service
• Complying with legal obligations

6. Legal Basis for Processing

We process your data based on:

• Contract performance (service provision)
• Legal obligations
• Legitimate interests (service improvement, security)
• Consent (where specifically requested)

7. Data Retention

We retain your data for:

• Account information: As long as your account is active
• System logs: [specify retention period]
• Payment information: As required by tax and accounting laws
• Analytics data: [specify retention period]

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent

To exercise these rights, contact us at support@menudo.io

9. International Data Transfers

Your data may be transferred to:

• United States (Stripe, Mixpanel, Intercom)
• EU/EEA (Supabase, Vercel)

All transfers are protected by appropriate safeguards, such as Standard Contractual Clauses.

10. Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit and at rest
• Access controls
• Regular security assessments

11. Changes to This Policy

We may update this policy and will notify you of any material changes. Continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions or requests, contact us at: Email: support@menudo.io

13. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority:

Bayerisches Landesamt für Datenschutzaufsicht Promenade 18 91522 Ansbach Germany