Privacy Policy

Last updated: 1 October 2026

This Privacy Policy explains how Loopeasy Ltd (Reg. no. CY10415130F), 2 United Nation Street, Anastasia Court, 1st floor, Larnaca 6042, Cyprus, processes personal data in connection with menu.video, in accordance with the EU General Data Protection Regulation (GDPR) and Cyprus data protection law.

1. Data controller

Loopeasy Ltd is the data controller. For any privacy request, contact info@menu.video.

2. Principles

We process data lawfully, fairly and transparently; we collect only what is necessary (data minimisation); we keep it only as long as needed (storage limitation); and we protect it (integrity and confidentiality).

3. Data we collect

Restaurant customers: name, email, password (hashed), restaurant name and the content you upload, plus billing data handled by Stripe.

Prospective customers who contact us or start signing up on our website: name, email, phone number (optional), restaurant name, your message and the answers you give in the signup form. We also note how you found us: the page or ad you came from and, if you tell us, how you heard about us. We use these details to reply to you and help with your menu, by email, phone or WhatsApp. To block spam we keep a pseudonymised (hashed) version of your IP address, used only to limit repeated submissions.

Automated WhatsApp messages (only if you tick the box). In our forms, a separate WhatsApp checkbox (never pre-ticked) lets you agree that menu.video (Loopeasy Ltd) may message you on WhatsApp. If you tick it, we may send you from our business number, automatically and at set times, a welcome message after your request and a few reminders about your menu: at most four messages within about 14 days. They stop as soon as you reply, and for good if you reply STOP, tap "Stop promotions" or write to info@menu.video. They are sent through the WhatsApp Business Platform (Meta) via our provider 360dialog. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time; withdrawal does not affect messages already sent. Without the tick we do not send you automated WhatsApp messages. For the lead forms in our ads (section 4) the same applies to the WhatsApp checkbox of the form.

Diners browsing a public menu: no account is required and no personal data is collected; an anonymous identifier stored in a cookie is used only to de-duplicate "likes".

4. Lead forms in our Facebook and Instagram ads

Some of our ads on Facebook and Instagram include an instant form. If you choose to fill it in, the form is shown and collected by Meta Platforms Ireland Ltd on its own platform, under Meta's terms and privacy policy; for that collection on its platform Meta acts as an independent controller. Meta then passes the answers you submitted to us.

What we receive: the details you entered in the form — typically name, email, phone number, restaurant name, your role and the area or city of your venue, plus any other answer to the form's questions — together with technical information about which ad, form and campaign the request came from. From that moment Loopeasy Ltd is the controller of this data, which is stored in our database like any other contact request.

Why and on what legal basis: to reply to your request and tell you about menu.video (steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR) and, for a reasonable follow-up, our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR). We do not sell this data and do not use it for automated decision-making.

How long we keep it: as long as needed to follow up on your request. If you do not become a customer, we delete it no later than 24 months after our last contact with you, or sooner if you ask. You can object or ask for deletion at any time by writing to info@menu.video.

5. Purposes & legal basis

We process data to provide the Service (performance of a contract), to answer contact and signup requests (pre-contractual steps and legitimate interest), to comply with legal obligations, to process payments, to send transactional emails and, only with your consent, to send the automated WhatsApp messages described in section 3. Analytics cookies and advertising pixels (Google, Meta, Microsoft Clarity) are used only with your consent. When you send us a form, we record the page and the campaign parameters of the link you arrived from (for example the ad name and click identifier), to know which ads bring requests: this is our legitimate interest and does not use cookies.

6. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw consent at any time. You can lodge a complaint with the Cyprus Commissioner for Personal Data Protection or with the supervisory authority of the EU country where you live. Exercise your rights by emailing info@menu.video.

7. Recipients & sub-processors

We share data only with the providers that run the Service: Railway (hosting and file storage), Neon (database), Cloudflare (video delivery via Cloudflare Stream and, where enabled, anti-bot checks on forms), Stripe (payments), Resend (transactional email), Google (Google Analytics and Google Ads, only with your consent; Google Cloud / Gemini to generate images and videos of your dishes; Google Maps Platform to find your venue while you sign up), Microsoft (Clarity heatmaps and session replays of the website, only with your consent), OpenAI and Kling AI (image and video generation from the content you upload) and Meta (Meta Pixel, only with your consent; the lead forms described in section 4; WhatsApp, when we write to you there), 360dialog GmbH (Germany: sending and receiving our WhatsApp Business messages, including the automated ones in section 3). They process data on our behalf under appropriate agreements; some may process data outside the EU under adequate safeguards such as the European Commission's Standard Contractual Clauses.

8. Retention

Account and content data are retained while your account is active and for a reasonable period afterwards, then deleted on request or after prolonged inactivity. On termination you may request export within 30 days. Data about prospective customers (contact form, signup, lead forms) is kept as described in section 4. The log of automated WhatsApp messages (which message, when, delivery status, replies) is deleted after 90 days. If you asked us to stop, we keep only a pseudonymised fingerprint of your number (not the number itself), for as long as needed to make sure we never write to you again. Billing records are kept for as long as tax law requires.

9. Security

We protect data with industry-standard measures (encrypted connections, access limited to the people who need it). Passwords are stored hashed; we never store full card numbers (handled by Stripe).

10. Cookies

See our Cookies Policy. The public video menus do not use tracking cookies.

11. Changes

We may update this Policy; the "last updated" date reflects the latest version.

Contact

Loopeasy Ltd (Reg. no. CY10415130F)
2, United Nation Street, Anastasia Court, 1st floor
Larnaca 6042, Cyprus
info@menu.video · WhatsApp