Privacy Policy
How we handle your restaurant data and your guests' data when you use Ordenala.
Last updated: June 14, 2026
1. Introduction
At Ordenala we handle your data with transparency. This policy explains what information we collect when you create and manage QR menus, how we use it, and what control you have over it.
2. Information we collect
To provide the service we collect two types of information:
Menu content (public)
Data you choose to show on your digital menu: business name, dishes, prices, images, hours, map location, social links, and messages by location or group.
Account and billing (private)
Email, name (optional), access data, payment identifiers processed by Stripe, and messages you send us through the contact form. We do not store card numbers on our servers.
3. How we use your information
- To create, host, and display your QR menu and informational site according to your plan.
- To process payments and subscriptions through Stripe.
- To send you access credentials, purchase summaries, and QR codes by email.
- To provide support and answer questions about your account or menu.
4. Sharing with third parties
We do not sell your personal data. We only share information with trusted third parties when it is strictly necessary to operate the service, always under agreements that protect your privacy:
- Payments: Transaction processing and subscription management.
- Infrastructure: Hosting of the application, images, and menu data.
- Authentication: Protection of secure access to the admin dashboard.
- Email: Sending transactional messages and, on the Premium plan, forwarding guest reviews to the email you provide.
5. Data retention
While your subscription is active
We keep your menu content while you maintain an active subscription. If you cancel, the data is stored for up to 3 months to allow reactivation; afterward it may be permanently deleted.
6. Control of your data
You can manage the visibility and content of your menu from the admin dashboard.
- You own your content. Photos, text, and data from your restaurant belong to you; we only host them to provide the service.
- Unpublish: You can hide your QR menu from the dashboard; it will no longer be publicly accessible.
- Deletion: You can request permanent deletion of your account and menus by contacting support. This action is irreversible.
7. Security
We use SSL/TLS encryption in transit. Payments are processed by Stripe, so we do not store card data. Dashboard access is protected by Clerk.