Last updated: May 19, 2026.
Easy Menus is a small service that does a focused thing: it lets you point a permanent QR code at a PDF you update by email. Our privacy posture matches that — we collect what we need to run the service, and not much more.
What we collect
When you sign up, we store your name, business name, email address, business contact info, and the PDFs you upload. When customers scan your QR code, we record an anonymized scan count for your benefit (so you can see how often the code is being used). We don’t store the contents of the scans themselves.
For billing, our payment processor (Stripe) handles card details. We never see or store your card number — Stripe gives us a token that lets us charge the card without ever holding the number ourselves.
What we don’t collect
We don’t have a tracker that follows you around the internet. We don’t sell your data — there’s nothing meaningful to sell. We don’t share your menus, customer scan data, or contact info with marketing partners. We don’t fingerprint your browser to identify you across sessions.
How we use it
We use your account info to provide the service and to email you when something important happens (a verification request, a confirmation that your menu was updated, billing receipts). We don’t use it to send promotional email unless you opt in.
Authorized senders
If you add an authorized sender to your code, we keep their email address so we can verify them and accept updates from them. We don’t use that address for any other purpose. They can be removed at any time from inside the app.
Third parties we use
A short list, by purpose:
- Stripe — payments
- Supabase — account database and authentication
- AWS (S3, SES) — file storage and transactional email
- Google Workspace — our own internal email
Each of these has its own privacy policy and is responsible for what it does with the data we send it for the specific purpose listed above.
Your rights
You can request to see, export, or delete your data at any time. Email us and we’ll handle it within a business day. Account deletion is currently a support request (so we can confirm it’s really you) — we’ll have self-service deletion soon.
Cookies
We use a small number of cookies to keep you logged in and to remember your account between sessions. We don’t use third-party advertising cookies.
Changes
If we change this policy in a material way, we’ll email you before the change takes effect. We won’t quietly expand what we collect or how we use it.
Contact
Questions? Concerns? Get in touch. A real person will reply.