Privacy Policy

Benjamin Tournois (entrepreneur individuel), 22 rue Hibert, 06400 Cannes, SIRET 890 470 818 00018. Contact: hello@nusa.menu.

(a) Account: email, name, password (hashed by Firebase Authentication, never accessible in clear text). (b) Establishment: name, address, phone number, opening hours, links — business data intended to be published on the public menu. (c) Content: menu texts, photos and imported documents (including for AI processing). (d) Shop orders: delivery address, order details and amount.

(e) Billing: processed by Stripe (the publisher never has access to card numbers). (f) Contact form: name, email, message. (g) Technical data: connection and security logs, cookies (see the “Cookies” section).

Providing the Service, managing accounts, subscriptions and orders → performance of the contract. Billing and retention of accounting records → legal obligation. Security, abuse and fraud prevention → legitimate interest. Audience measurement on the marketing site (cookies) and non-essential communications → consent.

Account data: lifetime of the account, then deletion. Accounting records (invoices, orders — stripped of their delivery address upon account deletion): 10 years (accounting obligation). Technical logs: 12 months. Contact form messages: 3 years maximum.

Data is processed by the following providers, each within the scope of its mission: Google Firebase (Google Ireland Ltd — application data hosting and authentication), Stripe (payments and invoicing), Resend (transactional emails), Anthropic, Google and Mistral AI (AI processing of imported menu documents — submitted documents are not used to train their models), our printing partner (name and delivery address, for the sole purpose of shipping Shop orders), and our hosting provider (IONOS SARL, 7 place de la Gare, 57200 Sarreguemines, France — 0970 808 911).

No data is sold or shared with third parties for advertising purposes.

Some providers (Stripe, Resend, Anthropic, Google) may process data in the United States. These transfers are governed by the European Commission's “EU-U.S. Data Privacy Framework” adequacy decision and/or standard contractual clauses.

You have the rights of access, rectification, erasure, restriction, objection and portability. Account deletion is available in your account area (settings) or upon request to hello@nusa.menu. You may lodge a complaint with the CNIL (cnil.fr). If you are located outside the European Union, you may benefit from equivalent rights under your local legislation; requests are made at the same address.

The Site uses strictly necessary cookies (login session, language preference), exempt from consent. Audience measurement (Google Analytics) is only activated after your consent via the dedicated banner; if you decline, only aggregated, cookie-less measurement is performed. You can change your choice at any time.

The contact form is protected by reCAPTCHA (Google); its terms and privacy policy apply.

The publisher implements appropriate technical and organisational measures: encryption in transit (HTTPS), access control through security rules, per-account data isolation, secrets stored outside the codebase.

Restaurants' public menu pages set no audience-measurement cookies and collect no personal data from end visitors.

This policy may be updated; the date at the top prevails. In the event of a substantial change (new processor, new purpose), clients are informed.