Privacy Policy

Introduction

MyMenuSpotlight ("we," "our," or "us") is a service provided by Joshua Pozos Sanchez through pozoss.com. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.

Information We Collect

We collect information that you voluntarily provide to us when you:

• Register for an account on our dashboard
• Fill out and submit forms on our website (such as our contact form)
• Express interest in obtaining information about our services
• Participate in activities on our website
• Contact us via email, phone, or other communication channels

The personal information we may collect includes:

• Name
• Email address
• Phone number
• Restaurant or business name
• Message content when you contact us
• Payment information (processed securely through Stripe)
• Login credentials (securely managed through Clerk)
• IP address and usage data when accessing our dashboard

How We Use Your Information

We may use the information we collect for various purposes, including to:

• Provide, operate, and maintain our website and services
• Create and manage your user account on our dashboard
• Authenticate your identity when you log in
• Process payments and manage your subscription
• Respond to your inquiries and fulfill your requests
• Process transactions and send related information, including confirmations and invoices
• Send administrative information, such as updates to our terms, conditions, and policies
• Improve our website and services
• Develop new products, services, features, and functionality
• Communicate with you about our services, updates, and other information that may be of interest to you
• Protect against, identify, and prevent fraud and other unlawful activity

Cookies and Tracking Technologies

We and our third-party service providers, including Clerk and Stripe, may use cookies, web beacons, and other tracking technologies to collect information about your browsing activities on our dashboard. These technologies help us improve your user experience, understand usage patterns, and secure your account.

You can control cookies through your browser settings and other tools. However, disabling cookies may limit your ability to use certain features of our dashboard, particularly those related to authentication and session management.

Third-Party Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Payment Processing: We use Stripe to process payments. When you make a payment, you provide your payment information directly to Stripe, and their use of your personal information is governed by their privacy policy. We recommend reviewing Stripe's Privacy Policy for more information.
• Identity and Authentication Management: We use Clerk to manage user authentication and accounts in our dashboard. When you create an account or log in, you provide information directly to Clerk, and their use of your personal information is governed by their privacy policy. We recommend reviewing Clerk's Privacy Policy for more information.
• Content Management System: We use Sanity CMS to manage website content. When you update your restaurant's information, menu items, or other content, this data is stored and processed by Sanity. For more information about how Sanity handles data, please review Sanity's Privacy Policy.
• Hosting Services: We use Vercel to host our website and your restaurant website. Vercel stores and processes the data necessary to serve your website to visitors. For more information about how Vercel handles data, please review Vercel's Privacy Policy.
• Email Services: We may use third-party email service providers to send emails and communications.

These third-party service providers have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. We use Clerk, a leading identity service provider, to manage user authentication and ensure your account is protected. However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access personal information we hold about you
• The right to request correction of inaccurate personal information
• The right to request deletion of your personal information
• The right to object to processing of your personal information
• The right to data portability
• The right to withdraw consent

GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). This means you have additional rights and protections, including:

• Right to be informed: We provide clear information about how we use your data in this Privacy Policy.
• Right of access: You can request a copy of all personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate data we hold about you.
• Right to erasure: Also known as the "right to be forgotten," you can request that we delete all personal data we hold about you.
• Right to restrict processing: You can request that we temporarily or permanently stop processing your data.
• Right to data portability: You can request your data in a machine-readable format to transfer to another service.
• Right to object: You can object to our processing of your data for direct marketing or based on legitimate interests.
• Rights related to automated decision making: You have rights related to any automated decision-making or profiling (note that we do not currently employ such techniques).

To exercise any of these GDPR rights, please contact us at privacy@mymenuspotlight.com with the subject line "GDPR Request" and specify which right you wish to exercise. We will respond to all legitimate requests within 30 days.

California Residents

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA). These include the right to know what personal information we collect about you, the right to request deletion of your personal information, and the right to opt-out of the sale of your personal information (note that we do not sell personal information).

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

Account Deletion and Data Retention

You may request deletion of your user account at any time by contacting us at privacy@mymenuspotlight.com. Upon receiving your request, we will delete your account and personal information within 30 days, except for information that we are required to retain for legal, accounting, or business purposes.

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you
• Whether there is a legal obligation to which we are subject
• Whether retention is advisable in light of our legal position (such as for statutes of limitations, litigation, or regulatory investigations)

International Data Transfers

Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there. Vercel, our hosting provider, may also store data in various global regions to optimize performance and reliability.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to these transfers.

Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us so that we can delete the information.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: