MenuMax MenuMax

Huquqiy

Maxfiylik siyosati

Oxirgi yangilanish: 2-sentabr 2026

This Privacy Policy explains how MenuMax (menumax.com.tr) processes personal data for the digital QR menu service. The data controller is SERCAN ALYURT (sole proprietorship).

Contact: info@menumax.com.tr · sercanalyurt@gmail.com · WhatsApp +90 850 346 83 26 · https://menumax.com.tr
Address: Yıldırım Beyazıt Mahallesi, Candemir Sokak No:4, 59500 Çerkezköy / Tekirdağ, Türkiye

1. Data we process

  • Account: name, email, hashed password, business name, country, language and timezone.
  • Business profile: address, phone / WhatsApp, logo, cover and gallery, menu content, tables and orders.
  • Usage: panel and menu access, QR scan counts (for plan limits), technical logs.
  • Statistics (only with cookie consent): which page or QR menu was opened, traffic source (e.g. Google, direct, referring host), country/language cookie, device type. Raw IP and browser identity are not stored; IP and a random visitor id are HMAC-hashed. We do not build advertising profiles.
  • Payments: plan, amount, currency, status, error code and iyzico payment id. Card number, CVV and expiry are not stored on our servers; checkout runs on iyzico.
  • For VAT-exempt export invoices: legal company name, tax / VAT number and billing address.

When a guest opens a QR menu we may store scan counts and (on Pro) order / waiter-call data on the venue account. Guests do not create an account.

2. Purposes

  • Contract: account, menu publishing, paid plans and support.
  • Legal duty: invoicing, accounting and payment-institution rules.
  • Legitimate interest: security and abuse prevention.
  • Consent: optional analytics cookies (source and menu-visit summaries). The site works without them.
  • Consent, only if needed: marketing messages.

3. Payments and processors

Card and (in Turkey) bank-transfer payments are processed by iyzico. AI or maps providers may receive the text you submit when you ask for a suggestion. AI output (names, descriptions, allergens, calories or images) can be wrong; you must review and correct it before publishing (see the Foydalanish shartlari). Data is kept only as long as needed for the service and for legal retention.

4. Cookies

We use essential cookies for session, language/country and security. An analytics cookie is set only if you accept it. See the Cookie Policy and privacy notice. We do not use third-party advertising cookies.

Analytics records are kept for up to 14 months. Payment and invoice records follow legal retention rules.

5. Your rights

You may ask whether we process your data, and request correction, deletion or information about transfers. Write to info@menumax.com.tr. We may need to verify your identity. Turkish users also have rights under Law No. 6698 (KVKK).

6. Security and updates

Passwords are hashed. Card data is not stored on this site. This page is the current version of the policy. See also the Bekor qilish va pul qaytarish shartlari and the Foydalanish shartlari (including AI content review duties).