Privacy Policy

Last updated: February 2025

1. Introduction

Welcome to Codemida. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data.

2. Data We Collect

We collect the following data to provide and improve our services:

  • Account Information: Name, email, restaurant name, and selected plan.
  • Billing Data: Payments are securely processed via Stripe. We do not store credit card details.
  • Menu & Content Data: Menus, descriptions, prices, images, and QR code links stored in AWS S3.
  • Authentication Data: We use JWT tokens stored in cookies to manage authentication securely.
  • Usage Data: Interactions with our platform, including menu updates, plan changes, and login timestamps.
  • Cookies: Our platform uses cookies for authentication and to enhance user experience.

3. How We Use Your Data

We use your data to:

  • Provide and improve our service.
  • Manage payments and subscriptions.
  • Enhance user experience (e.g., menu personalization).
  • Analyze usage trends and improve performance.

4. Data Protection

We implement strict security measures to protect your data, including encryption, secure servers, and regular security audits.

5. Third-Party Services

We may share limited data with trusted third parties to operate our service:

  • Stripe: Secure payment processing.

6. Your Rights (GDPR Compliance)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access, update, or delete your personal data.
  • Request a copy of your stored data.
  • Opt out of marketing communications.
  • Request data portability or restriction of processing.

7. Hosting & Data Storage

Codemida is hosted on Vercel, a global cloud hosting provider that ensures high availability and security. Our backend services, including user authentication and data processing, are hosted separately on secure cloud infrastructure.

Database Storage

We use MongoDB to store user data and menu-related information. This database is securely hosted with encryption and access control mechanisms to prevent unauthorized access.

Image Storage & Deletion Policy

User-uploaded images, such as food photos for restaurant menus, are stored on Amazon Web Services (AWS S3). These images are publicly accessible through a secure content delivery system for faster load times.

When a menu is deleted by a user, all associated images are automatically and permanently removed from AWS S3. We do not retain copies of deleted images. Users are responsible for ensuring they have backups of any images they wish to keep before deleting a menu.

Data Transfers

Some of our services, including authentication and real-time menu updates, require data to be processed and transferred between our frontend (hosted on Vercel) and our backend infrastructure. We ensure that all data transfers are encrypted and follow strict security protocols.

8. Cookies

Codemida uses cookies and similar technologies to enhance your experience. By using our platform, you agree to the use of these cookies as described below.

Cookies We Use

  • Authentication Cookies: We store a secure cookie containing a JWT token to keep you logged in. This is necessary for authentication and security.
  • Functional Cookies: Google Translate may generate a session cookie to enable language translation and improve accuracy. This cookie disappears when you close your browser.

Managing Cookies

You can control and delete cookies from your browser settings. However, disabling authentication cookies may limit access to certain features.

9. Data Retention

We retain user data for as long as necessary to provide our service and comply with legal obligations. You may request data deletion at any time.

10. Policy Updates

We may update this Privacy Policy periodically. Significant changes will be communicated via email or our website.

11. Contact Information

If you have any questions or requests regarding your data, please contact us at: contact@codemida.com.