Last updated: September 29, 2026
Privacy Policy
This policy explains what information MenuPhotoLab collects, how it's used, and exactly how your photos are handled, since this product's whole job is processing photos of your food.
1. Information We Collect
Account information (your email address and authentication details, handled through our authentication provider); the dish photos you upload and the enhanced images generated from them; billing information, processed directly by Stripe; we never see or store your full card number; and basic usage data (device and log information) needed to run and secure the service.
2. How We Use Your Information
To operate the service: processing your enhancement requests, maintaining your account and credit balance, and generating your exports; to communicate with you about your account, jobs, and billing; to keep MenuPhotoLab secure and working correctly; and to process payments.
3. How Your Photos Are Handled
Uploaded photos and generated results are stored in secure cloud object storage. To produce an enhanced photo, your image is sent to the third-party AI providers that perform the actual enhancement (currently Google's Gemini and image models hosted on Replicate), solely to generate the result you requested. Background processing is coordinated through Trigger.dev. We do not sell your photos, and we do not use them to advertise anyone else's business.
4. Analytics and Cookies
We use two analytics tools and they work differently. Vercel Web Analytics is cookieless: it sets no tracking or advertising cookies and cannot follow you across other websites or apps. Visitors are counted using a hash derived from the incoming request, which is discarded after 24 hours, so the resulting statistics are aggregated and cannot be traced back to an individual. Google Analytics tells us how people find MenuPhotoLab, which search terms, links and campaigns bring restaurants here, and it does set cookies. Between them, what gets recorded is the page address, the referring site, an approximate location (country, region, city), your device type, browser and operating system, and a small number of named product events such as a signup finishing, a checkout beginning or photos being exported. We do not send Google your name, your email address or your photos, and sensitive values inside web addresses, including sign-in codes, are stripped out before anything leaves your browser. We advertise MenuPhotoLab on Google Search. If you arrive from one of those ads, Google adds a click identifier to the web address you land on, and we store it so we can tell which ads actually bring restaurants here and stop paying for the ones that do not. It tells us that a visit came from a particular ad. It is not used to build a profile of you, to follow you around other websites, or to show you ads anywhere else, and we run no remarketing. Google's own advertising storage stays switched off everywhere, and in the European Economic Area, the United Kingdom and Switzerland the click identifier is not stored at all unless you accept analytics on the banner. On consent: if you are in the European Economic Area, the United Kingdom or Switzerland, Google Analytics storage starts switched off and stays off unless you accept it on the banner we show you, and you can change your mind at any time with the Cookie settings link in the site footer. Elsewhere it is on by default and no banner appears. The full list: _ga and _ga_<ID> (Google Analytics, tells one visitor from another, kept up to 2 years); sb-<ID>-auth-token (keeps you signed in, set only when you sign in, kept until you sign out or for up to 400 days); mpl_locale (remembers the language you picked, kept 1 year); and mpl_gclid (records which of our ads brought you here, set only if you arrive from one, kept 90 days). Your browser's local storage also keeps your answer to the consent banner and, briefly, a photo you picked on the homepage so it can carry over into signup. When you pay, Stripe's checkout page on stripe.com sets its own cookies for fraud prevention under Stripe's privacy policy.
5. Browser Privacy Signals
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a refusal of analytics cookies: Google Analytics storage stays switched off for your visits, the same as declining on the banner, wherever you are. Vercel Web Analytics is cookieless and keeps counting visits in aggregate. The older Do Not Track signal has no agreed standard, so we don't respond to it separately; turning on GPC gives you the same result.
6. Sharing
We share data only with the service providers required to run MenuPhotoLab: Stripe (payments), Supabase (accounts, sign-in and database), Cloudflare R2 (photo storage), the AI image-processing providers named above, Trigger.dev (background job processing), Resend (transactional email), Google (the analytics described above), and Vercel (hosting and the analytics described above). We don't sell your personal data or your photos to anyone.
7. Legal Bases (EEA, UK, and Switzerland)
If data protection law in the European Economic Area, the United Kingdom, or Switzerland applies to you, we rely on these legal bases: performance of our contract with you, to run your account, process your photos, and handle billing; our legitimate interests, to keep the service secure, prevent fraud, and measure visits in aggregate without cookies; your consent, for Google Analytics cookies, which you can withdraw at any time through Cookie settings; and legal obligation, for the billing and tax records we are required to keep.
8. Data Retention
We keep your account data and photos for as long as your account is active. When your account is deleted, we delete your photos, generated images, and personal data within 30 days, and copies in our backups expire in their normal rotation after that. We keep billing and tax records for up to 7 years because the law requires it, and we may keep limited records longer where needed to prevent fraud or resolve a dispute.
9. Your Choices and Rights
You can delete your account and its data yourself at any time from Settings > Data & privacy. You can also access, correct, or request deletion of your data by contacting us, and we respond within 30 days. Depending on where you're located, you may have additional rights under applicable data protection law (such as GDPR or CCPA), including the right to complain to your local data protection authority; contact us to exercise them.
10. Children's Privacy
MenuPhotoLab is a business tool built for restaurants, not directed at children, and we don't knowingly collect information from anyone under 16.
11. International Users
MenuPhotoLab and the providers we use may process data in the United States or other countries where those providers operate. When personal data from the EEA, the UK or Switzerland is transferred to the United States, our service providers rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where they are certified under it, or on the European Commission's Standard Contractual Clauses in their data processing terms.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date.
13. Contact
Questions about this policy, or want to exercise a data right described above? MenuPhotoLab LLC is the company responsible for your data. Reach us at privacy@menuphotolab.com or through our Contact page.