Last updated: August 15, 2026
Privacy Policy
This policy explains what information MenuPhotoLab collects, how it's used, and exactly how your photos are handled, since this product's whole job is processing photos of your food.
1. Information We Collect
Account information (your email address and authentication details, handled through our authentication provider); the dish photos you upload and the enhanced images generated from them; billing information, processed directly by Stripe; we never see or store your full card number; and basic usage data (device and log information) needed to run and secure the service.
2. How We Use Your Information
To operate the service: processing your enhancement requests, maintaining your account and credit balance, and generating your exports; to communicate with you about your account, jobs, and billing; to keep MenuPhotoLab secure and working correctly; and to process payments.
3. How Your Photos Are Handled
Uploaded photos and generated results are stored in secure cloud object storage. To produce an enhanced photo, your image is sent to the third-party AI providers that perform the actual enhancement (currently including Google's Gemini, Photoroom, and Replicate-hosted image models), solely to generate the result you requested. Background processing is coordinated through Trigger.dev. We do not sell your photos, and we do not use them to advertise anyone else's business.
4. Analytics and Cookies
We use Vercel Web Analytics to see which pages restaurants visit and which parts of the product get used. It is cookieless: it sets no tracking or advertising cookies and cannot follow you across other websites or apps. Visitors are counted using a hash derived from the incoming request, which is discarded after 24 hours, so the resulting statistics are aggregated and cannot be traced back to an individual. What gets recorded is the page address, the referring site, an approximate location (country, region, city), and your device type, browser and operating system. We also record a small number of named product events, such as a signup finishing or a checkout beginning, to tell whether the product is working, never who you are. Apart from this, MenuPhotoLab sets only the cookies strictly necessary to keep you signed in and your account secure. Because we run no advertising and no cross-site tracking, MenuPhotoLab shows no tracking-consent banner.
5. Sharing
We share data only with the service providers required to run MenuPhotoLab: Stripe (payments), Supabase (accounts, sign-in and database), Cloudflare R2 (photo storage), the AI image-processing providers named above, Trigger.dev (background job processing), Resend (transactional email), and Vercel (hosting and the analytics described above). We don't sell your personal data or your photos to anyone.
6. Data Retention
We keep your account data and photos for as long as your account is active. If you delete your account, we delete or anonymize your personal data and photos within a reasonable period, except records we're required to keep for legal, tax, or fraud-prevention purposes.
7. Your Choices and Rights
You can access, correct, or request deletion of your data at any time by contacting us. Depending on where you're located, you may have additional rights under applicable data protection law (such as GDPR or CCPA); contact us to exercise them.
8. Children's Privacy
MenuPhotoLab is a business tool built for restaurants, not directed at children, and we don't knowingly collect information from anyone under 16.
9. International Users
MenuPhotoLab and the providers we use may process data in the United States or other countries where those providers operate.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date.
11. Contact
Questions about this policy, or want to exercise a data right described above? Reach us at privacy@menuphotolab.com or through our Contact page.