Privacy Policy and Information Notice

This notice covers personal data processing in the Orvunai website, business accounts and digital menu service. The service provider identified at the start of this document is the controller for platform accounts and its own service operations.

A restaurant publishing a menu may separately be a controller for personal information it uploads and its interactions with guests. For processing Orvunai performs on a restaurant’s behalf, the parties’ roles are determined in the relevant service and data processing agreement. The restaurant’s own privacy notice may also apply.

Name, email, securely hashed password, business information, language/time zone, team membership and subscription details are processed to create accounts, provide access and deliver the service. The basis is necessity for entering into or performing a contract (Turkish KVKK Article 5(2)(c)). This basis applies to the individual who is a contracting party; access information for a corporate customer’s staff requires a separate legitimate-interest assessment under Article 5(2)(f) for necessary service administration. An account cannot be opened without required registration details; public menus can be viewed as a guest.

Support requests and records such as the accepted terms version and timestamp are processed as necessary to deliver the service and establish, exercise or defend rights (Article 5(2)(c), (e)). Mandatory financial and regulatory records are processed to meet legal obligations (Article 5(2)(ç)). Recording that a privacy notice was presented/read is not recording consent to data processing.

Menu text, images and file contents are processed for your selected import, editing and publishing actions. Text, images or extracted PDF content may be sent to the configured AI provider for an AI import. The business description you enter for AI starter-menu generation may also be sent to the provider. The purpose is to deliver your requested service; you must separately have a valid basis for uploading other people’s personal data.

AI waiter conversations store your messages, replies, suggestions, menu/language information, a random visitor identifier and timestamps. Where external AI is used, your current question and candidate menu items may be sent to the provider. Do not use chat to share health information, identity documents, card details or other people’s personal data.

Views, category selections, favourites, QR sources and search intent are recorded with random visitor/session identifiers, language, broad device category and timestamps to produce usage statistics. Raw search text is not retained in analytics events. These identifiers may be pseudonymous personal data even without your name. Analytics events are generated automatically in the current version.

Optional conversion measurement is off until you enable it in the public-page footer. The browser stores your choice and, when enabled, keeps coarse source, language, sector and demo-use categories in tab storage for a fixed 30-minute window. No visitor identifier, raw URL, referrer, email or token is sent in public measurement events. Daily totals are retained for 90 days. If you register with measurement enabled, these coarse categories are associated internally with your business for up to 120 days to count successful registration and first menu creation/publication within 30 days, campaign grants and provider-confirmed paid activation. Reports contain aggregated counts only. You can disable future measurement in the footer; DNT/GPC also prevent it. Security and existing guest-menu analytics are separate.

IP addresses, request paths, timestamps, response statuses and account activity records are processed to prevent attacks, secure access and investigate errors. Legitimate interests for security and basic service measurement may be relied on only where your fundamental rights and freedoms are not harmed (Article 5(2)(f)). Usage analytics requires its own balancing assessment; reading this notice does not grant permission for analytics.

Information is collected electronically through your forms, uploads and chats, your team administrator’s invitation, payment provider notifications and automatic browser/server communications. A separate purpose requiring consent must be explained separately and accompanied by a freely given choice.

Necessary information may be shared with hosting/storage, email delivery, selected AI and payment providers to the extent needed for those services. Team members can access business information within their permissions. Information may be disclosed to public authorities when legally required.

When online payments are enabled, Paddle provides the payment interface. Orvunai has no field for storing card numbers or security codes; it holds customer/transaction/subscription identifiers, plan details and billing periods. The payment provider supplies a separate privacy notice for its operations.

Providers and processing locations are described in the business details at the start of this document. International processing requires a valid transfer basis under KVKK Article 9 and, where applicable, GDPR Chapter V; acknowledging this notice alone does not authorise a transfer. No unrestricted transfer assurance is made without identifying the provider, country and applicable safeguards.

The orvunai_refresh cookie renews your login and lasts 30 days by default; orvunai_ui_locale remembers the interface language for 365 days. To show location-appropriate subscription currency and prefill registration/onboarding fields, orvunai_pricing_currency and orvunai_market_country are derived from Cloudflare country-level location data and retained for up to 24 hours; precise location and GPS data are not used. Session duration can vary with deployment settings. The short-lived access token is kept in browser memory.

Local storage keeps language/theme preferences, a random visitor identifier, menu session information and a conversation reference. When a menu is opened again, its session identifier renews if 30 minutes have passed since the last recorded opening; this does not erase the stored entry. Local entries can remain until you clear browser data. Browser settings let you manage them; clearing them may affect sessions and preferences and does not automatically delete server records.

The current application has no third-party advertising tracker. First-party menu analytics runs automatically and a separate analytics preference panel is not yet provided. Browser storage controls do not replace consent where it is required.

AI waiter conversations expire 30 days after creation; expired conversations and their messages are removed by daily cleanup. Starting a new chat does not immediately delete the previous server transcript.

Original import files are processed without a persistent file record in the import service; this does not mean an external AI provider retains nothing. Published product images remain while in use. Unused images become eligible for periodic cleanup after 24 hours; storage and cache cleanup may remove copies later.

This version does not define a single automatic deletion period for account, subscription, security, analytics or backup records. Retention must be assessed separately against the service relationship, applicable legal duties, possible legal claims and the purpose of the data. Deleting a menu or cancelling a subscription does not automatically erase all records. Erasure requests are assessed subject to valid retention obligations.

Under KVKK Article 11, you may learn whether your data is processed, request information or correction, seek erasure/destruction when the conditions apply and exercise the other statutory rights. Send your request from your registered account email to the address listed at the start of this document, or in writing to the listed postal address, with enough information to verify your identity. Other legally valid request methods remain available. Do not send unnecessary identity documents or sensitive information.

Requests are handled under the applicable Turkish controller-request procedure as soon as possible and within 30 days, normally without charge; any additional cost is subject to the statutory tariff. Your right to complain to the Turkish Personal Data Protection Board under the statutory conditions remains unaffected. Where GDPR applies, access, rectification, erasure, restriction, objection, portability and supervisory-authority complaint rights apply subject to their respective conditions. Consent, where separately used, can be withdrawn without affecting earlier lawful processing.

AI food suggestions are not used to make decisions about you with legal or similarly significant effects. Material updates to this notice will be communicated appropriately. The version and update date appear on this page.