رازداری کا خلاصہ

رازداری کا خلاصہ

تینوں تصاویر پہلے fal.ai کو بھیجی جاتی ہیں تاکہ Rodin v2 سے ماڈل بنایا جا سکے۔ اگر وہ سروس دستیاب نہ ہو یا ناکام ہو جائے تو وہی تصاویر بیک اپ کے طور پر Tripo کو بھیجی جاتی ہیں۔

اصل تصاویر پروسیسنگ مکمل ہوتے ہی حذف کر دی جاتی ہیں۔ معیار بہتر بنانے کے لیے رکھی گئی آرکائیو کاپیاں زیادہ سے زیادہ 30 دن بعد حذف کر دی جاتی ہیں۔

تیار شدہ 3D ماڈل کی آرکائیو کاپی اس وقت تک رکھی جاتی ہے جب تک متعلقہ ریستوران یا اکاؤنٹ حذف نہ کر دیا جائے۔

IP ایڈریس عارضی طور پر غلط استعمال محدود کرنے کے لیے استعمال ہوتا ہے؛ اس کا ہیش ایک مشترکہ کاؤنٹر میں مختصر مدت کے لیے رکھا جاتا ہے اور باقاعدگی سے حذف کر دیا جاتا ہے۔ اسے کراس سائٹ ٹریکنگ کے لیے استعمال نہیں کیا جاتا۔

مینو امپورٹس Together AI کے ساتھ پروسیس کیے جاتے ہیں؛ سبسکرپشنز اور خریداریاں RevenueCat، Apple اور Google کے ساتھ؛ اور، صرف اس وقت جب فعال ہو، ریزرویشن فارم میں سیکیورٹی چیک Cloudflare Turnstile کے ساتھ۔ ڈیٹا مناسب حفاظتی اقدامات کے ساتھ دوسرے ممالک میں منتقل کیا جا سکتا ہے۔

مکمل قانونی متن (انگریزی)

مکمل اصل متن ذیل میں انگریزی میں درج ہے۔ اوپر دیا گیا ترجمہ شدہ حصہ ایک معلوماتی خلاصہ ہے، مکمل قانونی ترجمہ نہیں۔ اپنے دائرہ اختیار میں قانونی تقاضوں کے لیے براہ کرم کسی مستند مقامی پیشہ ور سے رجوع کریں۔

Marketing website advertising measurement and cookie choice

MenuPort marketing pages use Google Ads and Meta Pixel. Google starts with advertising storage and personalization denied and may send cookieless technical signals in that state. Meta Pixel loads only after you accept advertising cookies. With consent, page visits and App Store/Google Play link clicks are sent to the respective provider. A store click does not mean an app installation or subscription purchase.

These providers may process IP addresses, browser information, visited pages and advertising/cookie identifiers under their own policies. Your choice is stored in your browser under menuport.marketing-consent. Clear the site's browser data to choose again. These advertising tags are not installed on restaurants' QR menu pages.

Data Controller

MenuPort is the data controller for the processing described here. You can get in touch about anything concerning your personal data at the contact address below.

This policy is prepared to meet the information obligations under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR).

Two Kinds of Users, Two Kinds of Data

MenuPort has two kinds of users, and the data processed about them is entirely separate: restaurant owners who manage a menu (they create an account) and guests who scan a QR code to view a menu (they do not).

Data Processed About Restaurant Owners

This data is necessary to create the account, provide the service and keep it secure.

• Identity and contact: email address, display name. If you sign in with Google or Apple, the email address and name shared by that provider are also processed.
• Team details: the email address, role and team code of people you add to your team.
• Menu content: restaurant name, description, menu address (slug), categories, products, prices, allergen and nutrition details.
• Visual content: uploaded product photos and the frames captured for 3D model generation.
• 3D generation archive: a copy of source photos and the generated model may be kept separately for quality analysis and future internal improvements. Source-photo copies are removed within 30 days; archived GLB/USDZ model files remain until the related restaurant or account is deleted.
• Store purchase and 3D-credit records: store (Apple/Google), product and credit quantity, a transaction-identifier hash, verification/consumption/refund status, account binding, and the version and time of the purchase-terms acceptance. MenuPort does not store card or full payment details; the store processes payment.
• Subscription status: the user record linked to your MenuPort account ID at our subscription-management provider RevenueCat, plus active subscription, renewal and cancellation status.
• Menu import: the web address you enter for an import and the menu text and images read from that page.
• Support requests: subject, message, priority, up to 3 attached images and the replies given.
• Notifications: your device's push-notification token and your notification preferences.
• Operational security: session records, application crash and error reports.

Data Processed About Guests Who Make Reservations

This information is processed to send the request to the restaurant you selected and allow the restaurant to manage it. The restaurant you book with is the data controller for this data; MenuPort processes it as a data processor on the restaurant's behalf and instructions. For rights concerning your reservation, contact the restaurant first. A restaurant may provide its own privacy-notice and reservation-terms links in the booking form.

To prevent automated and repeated submissions, a SHA-256 hash derived from the requesting IP address is kept with a 10-minute counter window for at most about 24 hours; the raw IP address is not written to that counter.

During periods of heavy abuse, Cloudflare Turnstile security verification may be enabled on the booking form. When enabled, the form loads Cloudflare's verification script, and Cloudflare processes your IP address and browser/device characteristics under its own privacy policy to confirm that you are human. Viewing the menu itself does not trigger this verification.

• Name, phone number, party size, requested date and time, any guest note, and the language used.
• Records needed to manage the reservation and its status. A marketing-contact preference is stored separately only when the guest opts in; it is never required to book.

Data Processed About Menu Visitors

No account is created for guests viewing a menu, no cookies are used, no advertising identifier is generated and no cross-site tracking takes place; MenuPort does not create a device fingerprint. Only aggregate counts that help the restaurant improve its own menu are kept:

• How many times the menu and individual products were viewed.
• How many times the 3D/AR viewer was opened.
• Search terms that returned no results.
• Which filters (vegan, gluten-free, on sale) were used.
• Which language the menu was opened in and whether the device is a phone or a computer.

These Counts Cannot Be Linked to a Person

The records belong to the restaurant's menu rather than to individuals and consist of totals such as “this product was viewed 40 times”. Because no visitor identifier is created, these counts cannot be associated with a specific person.

The browser's `sessionStorage` is used only to avoid counting the same event more than once in a single visit. The value stored there is a marker, never leaves the device and is cleared when the tab closes; it is not a persistent identifier.

The browser's local storage (`localStorage` and the offline cache) holds only a copy of the last menu you viewed, so it still opens without a connection, and your age confirmation for menus with alcohol (valid for 24 hours). This information is not sent from your device, and you can delete it by clearing your browser data.

For abuse rate-limiting on the analytics endpoint, a truncated SHA-256 hash derived from the IP address is temporarily stored in the database with a one-minute counter window. The raw IP address is not written to that counter document. Counters expire after about 16 minutes and a cleanup job runs every 15 minutes. Because the hash can associate requests from the same source during this short period, it is pseudonymous rather than anonymous data.

Purposes and Legal Bases

• Creating the account, enabling sign-in and providing the menu service — performance of a contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)).
• Using the guest's necessary contact and booking details to receive and manage a reservation request. Marketing consent is separate and optional.
• Securing the service, preventing abuse and fixing errors — legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)).
• Providing aggregate menu usage statistics to the restaurant — legitimate interests; no data relating to an identified person is processed for this purpose.
• Verifying subscriptions and purchased 3D credits, assigning them to the correct account, managing balances, and handling refunds or disputes — contract performance, service security, and applicable financial/legal obligations.
• Improving 3D generation quality: copies of source photos and the generated model may be placed in a separate archive for quality analysis and future internal improvements — legitimate interests. Archived source-photo copies are deleted within 30 days; archived GLB/USDZ model files are kept until the related restaurant or account is deleted. During generation, photos are sent first to fal.ai/Rodin v2; if that provider fails, the same photos are sent to Tripo. These provider transfers are separate from archive retention.
• Menu import: converting the menu text on the web page you enter into a structured menu — performance of a contract.
• Answering support requests and sending service notifications, such as when a 3D model is ready — performance of a contract.
• Protecting the booking form against automated submissions and abuse — legitimate interests.
• Meeting legal obligations — legal obligation (KVKK art. 5/2-ç; GDPR art. 6(1)(c)).

Recipients and International Transfers

The service is delivered through infrastructure providers, and data is processed by the following parties:

• Google Ireland Limited / Google LLC (Firebase and Google Cloud) — hosting, authentication, database, file storage, push notifications and error reporting. Data is primarily held on servers within the European Union (europe-west1).
• fal.ai (Rodin v2) — primary 3D model-generation provider. Only the product photos needed to generate the model are sent.
• Tripo (tripo3d.ai) — fallback 3D generation provider. If generation with fal.ai fails, the same product photos are sent to Tripo solely to generate the model.
• Together AI (USA) — menu import. The menu text read from the web page you enter is sent to a language model running on Together AI to turn it into a structured menu. This text does not normally contain personal data; if the page contains any, it may be included.
• RevenueCat, Inc. (USA) — verifying in-app subscriptions and purchases and managing subscription status. Your MenuPort account ID and store transaction details are processed.
• Apple Inc. and Google LLC (App Store and Google Play) — payments, subscription renewals, cancellations and refunds are processed by these companies under the store's own terms and privacy policy; if you choose to sign in with Google or Apple, authentication also runs through them.
• Cloudflare, Inc. — Turnstile security verification on the booking form, only when enabled.

About Transfers Abroad

Some of the providers above are established outside Türkiye and may access data from abroad for support, backup or processing. Your personal data may therefore be transferred abroad.

Transfers abroad rely on the appropriate safeguards provided for in KVKK art. 9, in particular the standard contracts published by the Turkish Personal Data Protection Board; where that is not possible, only the occasional-transfer cases listed in art. 9(6) are relied on. Transfers from the EU/EEA rely on adequacy decisions or the European Commission's standard contractual clauses under Chapter V of the GDPR. You can write to the contact address below for information about the safeguards used.

Retention Periods

You can delete your account from the Profile screen in the app. Deleting the account permanently removes your restaurants, menus, products, uploaded images, generated 3D models and associated training-archive files. Purchased 3D credits are tied to the deleted account and can no longer be used, transferred or restored; mandatory consumer rights are unaffected. Limited store transaction records may remain for the purposes above, including service security, refund/dispute handling and financial/legal obligations. Deleting a single restaurant also removes that restaurant's archive. Source-photo copies are otherwise automatically removed within 30 days; generated model archive files remain until deletion. Deleted data also disappears from backups once the retention windows above have passed.

• Account and menu data: until the account is deleted.
• Store purchase and 3D-credit records: kept to verify store transactions, bind credits to the correct account, prevent replay, handle refunds/disputes and meet financial/legal obligations. The transaction ledger currently has no automatic deletion period; access is restricted to these purposes and retention is reviewed against applicable legal requirements. A raw Google Play purchase token is deleted after consumption/refund reconciliation is complete. The current account/SKU assent record is removed during account deletion; the terms version and assent time captured with a verified purchase may remain in its transaction record.
• Reservation information: for the period configured by the restaurant; the system default is 90 days when no period is set or the setting is 0. On expiry, the name, phone, note, language, marketing preference and guest-management token are anonymized or removed; date, time, party size and status may remain for booking history.
• Original 3D-generation uploads: deletion is attempted as soon as processing finishes, and the server retries automatically after a temporary storage failure; archived source-photo copies: no more than 30 days.
• Archived generated model files (GLB/USDZ): until the related restaurant or account is deleted.
• Analytics rate-limit IP hash: short-lived counter window; expires after about 16 minutes and is removed by the next 15-minute cleanup run.
• Backups: daily backups for 7 days, weekly backups for 14 weeks.
• App diagnostic records: 30 days. Error and crash reports sent to Firebase Crashlytics: for the provider's standard retention period.
• Booking rate-limit IP hash: at most about 24 hours.
• Support requests: until the account is deleted, including after a request is closed; deleting the account also deletes requests and their attachments.
• Text sent to Together AI during a menu import is not separately stored by MenuPort; the imported menu stays in your account until you delete it.
• Aggregate menu statistics: may be kept indefinitely as they cannot be linked to a person.

Your Rights

Under KVKK art. 11 and the GDPR you have the right to:

• Learn whether your personal data is processed and request information about it.
• Learn the purpose of processing and whether it is used in line with that purpose.
• Know the third parties to whom data is transferred, in Türkiye or abroad.
• Request correction of incomplete or inaccurate data.
• Request erasure or destruction of your data.
• Request that correction, erasure or destruction be notified to the parties data was transferred to.
• Object to a result reached solely through automated analysis that works against you.
• Claim compensation if you suffer damage due to unlawful processing.

How to Exercise Your Rights

You can edit your menu content and account details in the app and delete your account at any time. For anything else, write to the contact address below; requests are answered within the statutory time limits.

If you are not satisfied with the outcome, you retain the right to lodge a complaint with the Turkish Personal Data Protection Board or your local supervisory authority.

Security

Data is encrypted in transit, authorisation rules isolate each tenant's data from others, and clients cannot write directly to server-side records. That said, no system can offer absolute security; in the event of a security incident, the notifications required by law will be made.

Children

MenuPort is a service for businesses and is not directed at people under 18. Data is not knowingly collected from children.

Changes

When this policy is updated the date above changes. For significant changes affecting its scope, a separate notice is given in the app.

رابطہ

اس دستاویز کے بارے میں سوالات کے لیے: info@sorin.tech