Legal

Privacy Policy

How we handle your data — in plain English.

Last Updated: April 30, 2026
On this page Introduction Data We Collect Menu & Business Data Payment Handling Third-Party Services Cookies & Tracking Data Security Your Rights & Responsibilities Data Retention Account Termination Changes to This Policy Contact Us

1. Introduction

FixMenu ("we", "our", "us") operates the website www.getfixmenu.com and the web application at app.getfixmenu.com (together, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By creating an account or using FixMenu, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

2. Data We Collect

We collect the following categories of information:

Account information

  • Your full name, email address, and password (stored as a secure hash)
  • Restaurant or business name and type (optional)
  • Phone number (optional, for support)
  • Business location, currency, and timezone (optional)

Usage information

  • Pages and features you access within the dashboard
  • Date and time of access, IP address, browser type, and device information
  • Referral source (e.g. how you arrived at our website)

Communications

4. Payment Handling

FixMenu uses Razorpay as our payment processor for all subscription billing. When you upgrade to a paid plan:

  • Card numbers, CVVs, UPI IDs, and bank credentials are processed and stored directly by Razorpay — not by FixMenu.
  • We only receive a payment confirmation, transaction ID, billing amount, and the last four digits of the payment instrument.
  • For invoices and tax compliance, we may store your billing name, business name, address, and GSTIN (if provided).

You can review Razorpay's privacy practices at razorpay.com/privacy.

5. Third-Party Services

To run a reliable, secure SaaS product, we use a small number of trusted third-party providers. These providers may process limited data on our behalf:

  • Supabase — authentication and database hosting
  • Vercel — application and website hosting
  • Razorpay — subscription payment processing
  • Google Analytics — anonymous traffic analytics (optional)
  • Email providers — for transactional emails (sign-up confirmations, password resets, billing receipts)

These providers are bound by their own privacy policies and data processing agreements. We do not authorize them to use your data for any purpose other than providing services to FixMenu.

6. Cookies & Tracking

We use cookies and similar technologies to:

  • Keep you signed in to your account
  • Remember your preferences (e.g. dashboard layout, currency)
  • Measure aggregate, anonymous traffic to improve the Service

You can control or disable cookies through your browser settings. Note that disabling essential cookies may prevent you from signing in or using parts of the dashboard.

7. Data Security

We take security seriously. Our protections include:

  • HTTPS/TLS encryption for all data in transit
  • Database encryption at rest
  • Row-level security (RLS) policies, so users can only access their own data
  • Secure password hashing — we never store passwords in plain text
  • Restricted internal access on a need-to-know basis
  • Regular security reviews of our infrastructure and dependencies

No system is 100% secure. While we follow industry best practices, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at support@getfixmenu.com.

8. Your Rights & Responsibilities

Your rights

  • Access — request a copy of the data we hold about you
  • Correction — update or correct inaccurate information
  • Deletion — delete your account and associated data
  • Export — download your menu and business data in a portable format
  • Withdraw consent — opt out of optional analytics or marketing communications

Your responsibilities

  • Keep your account credentials confidential and use a strong, unique password
  • Provide accurate information when registering and using the Service
  • Notify us promptly of any unauthorized account access
  • Do not upload data that you don't have the legal right to use

9. Data Retention

We retain your account and business data for as long as your account is active. If you delete your account, your menu and business data will be permanently removed from our active systems within 30 days. Some records (such as billing and tax invoices) may be retained for longer periods as required by Indian law.

10. Account Termination

You may terminate your account at any time from your dashboard settings or by emailing support@getfixmenu.com.

We reserve the right to suspend or terminate accounts that violate our Terms & Conditions, engage in fraudulent activity, or pose a security risk to the Service or other users. Where possible, we will give reasonable notice before termination.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we'll update the "Last Updated" date at the top of this page. For material changes, we'll notify you by email or through an in-app notice before the changes take effect.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out: