This Privacy Policy (“Policy”) explains the principles regarding processing, storage, and security of personal data within Karekod.online services.

• Account data: name/company, email, phone, password (stored hashed).
• Business data: venue name, branch details, address and user-entered information.
• Menu content: product/category names, descriptions, prices, images, and similar content.
• Technical data: IP, device/browser info, timestamps, error logs, security logs.
• Analytics data: visit counts, page views, table/area-based views as anonymous/statistical metrics.

Note: We do not request identity details of menu visitors (guests); analytics are primarily anonymous/metric-based.

• To provide the service and manage your account
• To publish/update your menu and enable QR/NFC access
• To handle support processes
• Security, fraud prevention, and integrity protection
• Product and performance improvements (via anonymous/statistical analysis)
• To comply with legal obligations

Personal data may be processed based on legal grounds such as contract performance, legal obligations, legitimate interests, and consent where required.

Personal data may be shared with technical service providers (infrastructure, hosting, email delivery, etc.) only as necessary to provide the service and under confidentiality obligations. We do not share data with third parties for marketing without your explicit consent.

Data is retained for the periods required by law and as necessary for providing the service. After account closure, data will be deleted or anonymized within a reasonable time, except where retention is legally required.

• Passwords are stored hashed
• Access permissions are restricted
• Security logs/monitoring help prevent abuse

Users should not share passwords and should use secure devices to protect account security.

Essential cookies may be used for the website/panel to function. If analytics cookies are used, information is provided via cookie notices/settings.

• Learn whether your personal data is processed
• Request information if processed
• Request correction if incomplete/incorrect
• Request deletion or anonymization (within legal limits)
• Object where legal conditions apply

You can submit requests via [Email].

This Policy may be updated. The current version becomes effective once published on this page.