Privacy Policy
Menue helps restaurants and coffee shops publish a digital menu and page. This policy explains what personal data we process about businesses that create an account and diners who visit their pages.
Company details
- Controller / operator
- CodeCraft Advisory LLC
- Incorporation
- New Mexico, United States
- Address
- 1209 Mountain Road Pl NE, Ste R
Albuquerque, NM 87110, United States - Service
- Menue (menu.toolworldonline.com), part of ToolWorld Online
For privacy, write to avisos@toolworldonline.com; for legal matters legal@toolworldonline.com; for account help soporte@toolworldonline.com.
1. Controller and scope
Menue is operated by CodeCraft Advisory LLC. This policy follows Mexico's LFPDPPP and other applicable laws, and covers the Menue site, each business's menu page, our emails and the dashboard.
2. Data we process
| Activity | Data | Purpose |
|---|---|---|
| Business sign-up | Full name, email, country, WhatsApp/phone, business type, business name, password (PBKDF2 hash, never plain text) | Create and protect your account and confirm your email |
| Public business page | Name, logo, cover, address, phone, WhatsApp, hours, chef or barista names, services, social links, menu, prices and photos | Show your page and menu to diners |
| Login & security | Hashed one-time codes, sessions, failed attempts, IP and technical data | Authenticate you and prevent abuse |
| Statistics | Daily visit counts per page, not linked to a person | Show businesses how many visits their menu gets |
| Newsletter (optional) | Send news, only if you subscribe | |
| Pro plan | Subscription and payment history shared by PayPal (never the full card number) | Bill the plan |
3. Diners
Diners need no account and we ask for no personal data. We keep a daily visit count and the technical data needed to deliver and protect the site, and remember the chosen language with a cookie. "Call" and "WhatsApp" open directly on the diner's phone; Menue does not receive those calls or messages.
4. Providers
Cloudflare (hosting, D1 database, R2 images, security), Resend (transactional email), PayPal (Pro billing), Google Maps and Unsplash (maps and sample photos). Providers may process data outside Mexico, mainly in the United States.
5. Retention
Unconfirmed accounts are deleted after 7 days; active accounts are kept while they exist; confirmation codes expire in 30 minutes and login codes in 15; sessions last up to 30 days.
6. Your rights
You can access, rectify, delete or object to the use of your data and revoke consent. Write to avisos@toolworldonline.com; we reply within 20 business days.
7. Security
HTTPS everywhere, PBKDF2-SHA256 password hashing (100,000 iterations), expiring one-time codes locked after 5 failed attempts, HttpOnly Secure session cookies and restricted admin access.
8. Cookies
Only essential cookies (session and language). See the Cookie Policy.