Privacy Policy

Introduction

We are Galvan Digital LLC, doing business as NexMenus ("Company," "we," "us," "our"), a company registered in California, United States at 2712 Loker Avenue West #1116, Carlsbad, CA 92010.

We operate the website https://nexmenus.com (the "Site") and related products and services that link to this Privacy Policy (collectively, the "Services"). NexMenus helps restaurants and food businesses create and manage digital and printable menus.

This Privacy Policy describes what information we collect, how we use it, who we share it with, and the choices and rights you have. By using the Services, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the Services.

1. Information We Collect

Information you provide to us. When you create an account, we collect information such as your name, email address, password, and business details (for example, your restaurant name, address, phone number, and hours). When you build a menu, we collect the menu content you create, including item names, descriptions, prices, categories, and photos.

Payment information. If you purchase a paid subscription, payment is processed by third-party payment processors. We do not store full payment card numbers on our servers.

Information collected automatically. When you use the Services, we automatically collect certain technical information, such as your IP address, browser type, device type, operating system, referring URLs, pages viewed, and the dates and times of access. This information is used for security, analytics, and improving the Services.

Communications. If you contact us by email or through the Services, we keep a record of that correspondence.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Services, including publishing the menus you create.
Create and manage your account and authenticate access.
Process payments and manage subscriptions.
Respond to support requests and communicate with you about the Services, including service updates and administrative messages.
Monitor usage, diagnose technical issues, and improve the Services.
Protect against fraud, abuse, and unauthorized access.
Comply with legal obligations.

We do not sell your personal information.

3. Public Menu Content

Menus you publish through NexMenus are public by design. Content you choose to include on a published menu page — such as your business name, address, phone number, hours, menu items, prices, descriptions, and photos — is visible to anyone with the link and may be indexed by search engines. Do not include information on a public menu that you do not want to be public.

4. Menu Drafts Created Through ChatGPT

You can start a menu draft through the NexMenus plugin in ChatGPT without creating a NexMenus account. When you do, we collect the business and menu information you choose to provide in that conversation — such as your business name, menu items, prices, descriptions, hours, address, and contact details — so we can build and store your draft. For security and abuse prevention, we also process your IP address in a hashed (one-way encoded) form to apply rate limits; we do not store the raw IP address with your draft, and we do not receive your ChatGPT account identity.

Drafts are private: they are reachable only through unguessable links, are not published, and are excluded from search engines and from public areas of the Services. Unclaimed drafts become inaccessible automatically (currently about 72 hours after creation), and their access credentials are revoked. The associated draft records and credentials are then permanently deleted by scheduled cleanup after an additional retention period, currently up to seven days. If you claim a draft by signing in or creating an account, the draft becomes part of your account and the rest of this Privacy Policy applies to it.

Your conversation with ChatGPT itself is processed by OpenAI under OpenAI's privacy policy; we only receive the specific information the plugin sends to NexMenus to build your draft. To request earlier deletion of an unclaimed draft, contact us at [email protected].

5. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Services are used. Essential cookies are required for the Services to function, such as session cookies used for authentication. You can configure your browser to refuse cookies, but some parts of the Services may not work properly without them.

6. When We Share Information

We may share your information in the following circumstances:

Service providers. We use third-party vendors to help operate the Services, such as hosting providers, payment processors, and email delivery services. These providers only receive the information needed to perform their services and are obligated to protect it.
Legal requirements. We may disclose information if required to do so by law or in response to valid requests by public authorities, or to protect the rights, property, or safety of Galvan Digital LLC, our users, or others.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. Upon account termination, you have 30 days to request an export of your data. After that period, your data may be permanently deleted according to our retention practices. We may retain anonymized or aggregated data for statistical purposes, and we may retain certain information where required for legal, tax, or accounting reasons.

8. Data Security

We use reasonable technical and organizational measures designed to protect your information, including encryption in transit and access controls. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

Access the personal information we hold about you.
Request correction of inaccurate personal information.
Request deletion of your personal information.
Request a copy of your data in a portable format.
Object to or restrict certain processing of your information.

To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within the timeframes required by applicable law. You can also update much of your account information directly in your account settings.

10. California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information, including the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, and the right not to be discriminated against for exercising your privacy rights.

We do not sell or share personal information as those terms are defined under California law. To submit a request under the CCPA, contact us at [email protected].

11. Children's Privacy

The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. International Users

The Services are hosted in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

13. Third-Party Websites and Links

The Services may contain links to third-party websites or services that are not operated by us. This Privacy Policy does not apply to third-party sites, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any site you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. If we make material changes, we will take reasonable steps to notify you, such as by email or a notice within the Services. Your continued use of the Services after changes become effective constitutes acceptance of the revised policy.