1. Introduction
Starview Data LLC ("we," "us") operates StarviewMenu. This policy explains what information we collect, how we use it, and your rights. By using the Service you agree to this policy.
2. Information We Collect
Account information
When you sign in with Google OAuth we receive your name, email address, and Google account ID. We store these to authenticate you and operate your account.
Business information
Information you enter about your business: name, address, phone number, hours, website, social media links, and any text or images you upload to the platform.
Menu content
Menu categories, items, descriptions, prices, dietary flags, and photos you upload.
Usage data (anonymous)
When a customer views your public menu, we record: device type (mobile or desktop), general geographic region (country and region provided by our CDN — no precise GPS), the visit source (QR scan, direct link, or social media referral), and a timestamp. We do not collect IP addresses, names, or any identifying information about menu viewers.
Account activity
Timestamps of your last login and your menu's last customer view, used solely to enforce our data-retention policy (see Section 6).
3. How We Use Information
- Authenticate and operate your account
- Display your menu to customers
- Provide analytics to you about your menu's usage
- Send service-related emails (account notices, policy changes)
- Enforce our Terms of Service and data-retention policy
- Improve the Service (aggregate, anonymized signals only)
We do not sell your data. We do not use your data for advertising.
4. Third-Party Services
- Google OAuth — used for sign-in only. We receive only the profile information you authorize. Google's privacy policy: policies.google.com/privacy.
- Cloudflare — our infrastructure provider (hosting, CDN, database, file storage). Cloudflare may process request metadata in accordance with their privacy policy.
- Stripe — payment processing for paid subscriptions. Stripe collects and stores payment card data; we never see or store card numbers. Stripe's privacy policy: stripe.com/privacy.
5. Cookies
We use a single HttpOnly session cookie (sm_session) to keep you logged in. This cookie contains a signed authentication token; it stores no personal data and cannot be read by JavaScript. We do not use advertising cookies, tracking pixels, or analytics cookies.
6. Data Retention
We retain your account and menu data as long as your account is active. For inactive accounts:
- 30 days of inactivity (no customer menu views and no account login): your menu is archived (made inactive).
- 60 days after archiving (90 days total): your menu, items, images, and analytics data are permanently and irreversibly deleted.
Pro subscribers on an active paid plan are exempt from automatic archiving and deletion.
We will attempt to send an email notice before archiving if your email address is deliverable.
7. Your Rights and Choices
- Access: You can view all data you've entered by logging into your dashboard.
- Correction: You can edit your business and menu information at any time in the dashboard.
- Deletion: You can request complete deletion of your account and all associated data by emailing support@starviewdata.com. We will complete the deletion within 30 days and confirm by email.
- Data portability: Your menu data is available to you at any time in the dashboard. We do not currently offer a bulk export, but you may request one.
8. Data Security
Data is stored in Cloudflare D1 (SQLite) and Cloudflare R2, both encrypted at rest. All traffic is served over HTTPS. Authentication uses HMAC-signed session tokens. We take reasonable technical measures to protect your data, but no system is perfectly secure.
9. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it promptly.
10. International Users
The Service is operated in the United States. If you access it from outside the US, your data will be transferred to and processed in the US and in Cloudflare's global infrastructure.
11. Changes to This Policy
We may update this policy. Material changes will be announced via email or a dashboard notice at least 14 days before they take effect.
12. Contact
Privacy questions or deletion requests: support@starviewdata.com
Starview Data LLC · Connecticut · USA