Privacy Policy

1. Who this policy covers

OptiMenu is a business-to-business service intended for restaurant owners, managers, and the staff they authorize. This policy applies to the account holders and authorized users of a restaurant’s OptiMenu workspace. Where a restaurant uploads data about its own operations, suppliers, or transactions, the restaurant is responsible for ensuring it has the right to share that data with us, and we process it on the restaurant’s behalf.

2. Information we collect

Information you provide directly

• Account & restaurant details — name, email address, restaurant name, location, and other profile information you enter when you create or manage an account.
• Menu & recipe data — menu items, recipes, ingredients, portion and yield information, and pricing you add or import (including via our menu parser).
• Invoices & supplier documents — invoice images and files you upload, and the line-item data extracted from them (vendor, item, quantity, unit cost, dates).
• Billing information — your subscription plan and payment status. We use Stripe to process payments; card numbers are handled by Stripe and are not stored on our servers.
• Support communications — messages, feedback, and other information you send us.

Information from connected services

• Point-of-sale (POS) data — when you connect a POS provider (such as Shift4/SkyTab or Square), we receive sales and transaction data such as items sold, quantities, timestamps, and totals, used to rank popularity and estimate waste risk.

Information collected automatically

• Usage & device data — basic log information such as pages viewed, actions taken, approximate device and browser type, and timestamps, used to operate, secure, and improve the service.
• NFC / staff briefing access— when staff tap an NFC tag to view a shift’s recommendations, we may log that the briefing page was accessed in order to operate the feature. These pages are designed to work without staff accounts or personal logins.

3. How we use information

We use the information above to:

• generate Tonight’s Dish recommendations and the underlying waste-risk, popularity, and margin signals;
• parse and organize your invoices, menus, and ingredient data;
• create, authenticate, and manage your account and workspace;
• process subscriptions, billing, and renewals;
• provide customer support and respond to your requests;
• maintain, secure, troubleshoot, and improve the service;
• comply with legal obligations and enforce our terms.

4. AI processing & how recommendations are generated

OptiMenu’s core features rely on AI services to read documents and produce recommendations. Specifically, invoice images may be processed using optical character recognition (currently provided by Mistral), and recommendation and parsing logic uses the Anthropic (Claude) API. To deliver these features, relevant data — such as invoice contents, menu and recipe details, and aggregated sales signals — is transmitted to these providers solely to perform the requested processing and return results to your workspace.

Recommendations are generated to assist your decision-making and are not a substitute for your own judgment regarding food safety, inventory, purchasing, or pricing. See our Terms of Service for the full disclaimer on how to treat recommendations.

5. How we share information

We do not sell your personal information. We share information only as described below:

• Service providers (subprocessors). We rely on trusted third parties to run OptiMenu. Each receives only the data needed to perform its function:

• Legal & safety. We may disclose information if required by law, or to protect the rights, property, or safety of OptiMenu, our users, or others.
• Business transfers. If OptiMenu is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

6. Data retention

We retain your information for as long as your account is active and as needed to provide the service. After you close your account, we delete or de-identify your data within a reasonable period, except where we must retain certain records to comply with legal, tax, accounting, or security obligations, or to resolve disputes. You can request deletion as described below.

7. Security

We take reasonable measures to protect your information, including encryption of data in transit, row-level security and access controls on our database, and ownership checks that restrict each workspace’s data to authorized users. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to address vulnerabilities promptly.

8. Your rights & choices

Depending on your location, you may have rights to access, correct, export, or delete your information, or to object to or restrict certain processing. To make a request, or to close your account and have associated data deleted, contact us at privacy@opti-menu.com. We will respond consistent with applicable law. You can also manage or cancel your subscription from your account settings.

9. Cookies & similar technologies

We use cookies and similar technologies that are necessary to keep you signed in, remember preferences, secure the service, and understand basic usage. You can control cookies through your browser settings; disabling certain cookies may affect how the service works.

10. Third-party integrations & links

When you connect a third-party service (such as a POS provider) or follow a link to a third-party site, that third party’s own privacy practices apply to the information it collects. We are not responsible for the privacy practices of services we do not control. Review their policies before connecting or sharing data.

11. Children

OptiMenu is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and, for material changes, provide additional notice where appropriate. Your continued use of OptiMenu after an update means you accept the revised policy.

13. Contact us

Questions about this policy or your data? Reach us at privacy@opti-menu.com