Privacy Policy

MOSEGIC COMPANY LIMITED ("MOSEGIC", "we", "us", or "our"), a company registered in Kenya, operates MenuSaaS (the "Service"). This Privacy Policy explains what personal data we collect, how we use it, and the choices you have, when you register a business, manage a digital menu, or otherwise use the Service.

We collect the following categories of information:

• Account information: name, email address, and password (stored as a salted hash, never in plain text).
• Business/restaurant information: business name, menu slug, description, logo, theme colors, WhatsApp number, categories, menu items, prices, and images you upload.
• Billing information: subscription tier, billing interval, and transaction references. Card and payment details are collected and processed directly by Paystack; we do not store your full card number or CVV.
• Usage data: basic technical logs (e.g. IP address, browser type, pages visited) used for security, debugging, and abuse prevention.
• Customer-facing data: when your customers view your public menu, we may process their selected display currency and table number to render the page correctly; we do not require them to create an account.

We use the information we collect to:

• Provide, operate, and maintain the Service, including hosting your digital menu and generating QR codes;
• Process subscription payments and renewals via Paystack, and manage your subscription tier and limits;
• Communicate with you about your account, billing, or changes to the Service;
• Detect, investigate, and prevent fraud, abuse, or security incidents;
• Improve and develop new features of the Service.

We do not sell your personal data. We share information only with:

• Paystack — to process subscription payments and verify transactions;
• Cloud infrastructure providers (e.g. our hosting provider and database provider) — to store and serve application data;
• Exchange-rate data providers — to display approximate menu prices in an alternate currency (e.g. USD) for your customers;
• Law enforcement or regulators, where required by applicable law.

We retain account and business data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or fraud-prevention obligations. You may request deletion of your account and associated data at any time by contacting us (see Section 9).

We use industry-standard measures to protect your data, including encrypted connections (TLS/SSL) between your browser, our servers, and our database provider, and salted password hashing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update most account and business information directly from your dashboard, or contact us to exercise these rights.

We use essential cookies/local storage to keep you signed in and to remember preferences such as your selected menu currency. We do not use third-party advertising cookies.

For questions about this Privacy Policy, or to exercise your data rights, contact us at mosegiccompany@gmail.com.

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. The "Effective date" above indicates when this policy was last revised.