Privacy Policy

Who we are

Scan Dishes is operated by ScanDishes, which is the data controller for the personal data described in this notice. This means we decide how and why your data is processed.

What we collect and why

• Account data — restaurant owners' name, email, login credentials and restaurant details, used to create and run your account (legal basis: performance of our contract with you).
• Menu content — dish names, prices, photos and allergen information you publish, used to provide the service (contract).
• Order data — for diners placing Pro orders, only the fields the restaurant enables (for example a first name or table number), used to deliver the order to the restaurant (contract).
• Support messages — messages you send us, used to respond and help you (legitimate interests).
• Usage and device data — IP address, device identifiers and telemetry, used for security, fraud prevention and product improvement (legitimate interests).

Payment-related data is collected by Paddle as Merchant of Record when you buy a subscription; we never store card numbers.

Who we share data with

• Service providers and subprocessors that host, operate and support the service (hosting, analytics, support tooling).
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

How long we keep it

Detailed orders, including customer names and table numbers, are automatically deleted 24 hours after they are placed; only anonymous daily totals are kept. Account and menu data is kept while your account exists. Data is deleted or anonymised when it is no longer needed for the purposes above.

How we protect it

We use appropriate technical and organisational measures, including encryption in transit and server-side access controls. Each restaurant can only access its own data.

Your rights

Depending on your country, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. You may also complain to your data protection authority. To exercise any right, contact us from the Contact page; we respond within one month.

Cookies

We use essential cookies to keep you signed in and run the service. You can manage cookies in your browser settings; disabling essential cookies may prevent sign-in.