Privacy Policy

The controller of your personal data is VotedMenu (Italy). For anything about privacy, email support@votedmenu.com.

Cookies and storage. We use only strictly necessary cookies: a sign-in session cookie and a cookie remembering your light/dark theme. Your browser may also keep a few preferences locally. We use no analytics, advertising or tracking cookies, so we don’t show a cookie banner.

Where the GDPR or UK GDPR applies, we rely on these legal bases:

• To provide the service (contract): running your account, publishing your reviews, owner dashboards, the API, sending account emails (confirm email, password reset, account deletion).
• Legitimate interests: keeping VotedMenu secure, preventing fake reviews, spam and abuse, rate limiting, moderating reported content, fixing bugs and improving features. We balance these against your rights and keep only what we need.
• Consent: your precise location (you can turn it off in your browser at any time) and Google sign-in.
• Legal obligations: responding to lawful requests, keeping records our payment provider and tax law require.

We don’t use your data for advertising, we don’t sell or rent it, and we don’t make decisions about you that have legal or similarly significant effects by automated means alone.

Your name, profile picture, level and badges, and your ratings, reviews, photos, comments and public lists are public and can appear in search engines and through our API and AI assistant integrations. Private lists, your email, location, owner documents and API details are never public. If you’re a verified owner, replies and posts you publish appear under the restaurant’s name.

We use these service providers (“processors”), each only for the purpose listed:

We may also share data if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or acquisition (we’d tell you first). We do not “sell” or “share” personal information as those terms are used in California law.

Our providers may process data in countries other than yours, including the United States and the European Union. Where required, transfers are covered by safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

• Account and contributions: until you delete your account. Deleting it removes your profile, reviews, ratings, review photos, lists, comments, likes, API keys and claim documents.
• Sign-in sessions: expire after 7 days of inactivity.
• Unconfirmed sign-up, password reset and deletion links: expire after 1 to 24 hours.
• Owner verification documents: kept while the claim is reviewed and afterwards as a record of the decision; you can ask us to delete them once the claim is decided.
• Payment records: kept by Dodo Payments for as long as tax and accounting law requires.
• Backups: deleted data can remain in encrypted backups for up to 30 days.

Content you added to a restaurant as its owner or editor (menus, offers, posts) stays with the restaurant but is no longer linked to you.

Wherever you live, you can:

• Access and take a copy of your data: Account Settings → Download My Data.
• Correct it: edit or delete your reviews, or contact us.
• Delete your account and data: Account Settings → Delete Account.
• Object to or restrict processing based on legitimate interests, and withdraw consent at any time.
• Complain to your data protection authority (in the EU/UK, the authority where you live or work).

California residents also have the right to know, delete and correct personal information, and not to be discriminated against for using these rights; we don’t sell or share it, so there is nothing to opt out of. To use a right that isn’t in Account Settings, email support@votedmenu.com. We reply within 30 days and may need to confirm it’s you.

VotedMenu isn’t meant for children. You must be at least 16 to create an account. If you believe a child has given us personal data, email support@votedmenu.com and we’ll delete it.

Connections are encrypted (HTTPS), passwords and API keys are stored only as hashes, owner documents are visible only to our verification team, and access to production data is limited to people who need it. No system is perfectly secure; if a breach affects your data, we’ll tell you and the authorities as the law requires.

We’ll update this page when our practices change and change the date at the top. For significant changes we’ll also notify you by email or on the site before they take effect.

Questions or requests: support@votedmenu.com. See also our Terms of Service and Contact page.