Privacy Policy

1. Data we handle

Guests: when you pay through Mentiaq we handle the payment amount, tip, table and restaurant, and — only if you request a receipt — your email address. Card details are entered directly with Stripe and never touch Mentiaq's servers.

Restaurants: we handle the business and contact details you provide during onboarding and demo requests (name, email, phone, restaurant name, city), plus the transaction records the service generates.

2. Why we handle it

To run the service: showing bills, processing payments, sending receipts and keeping the restaurant's records accurate. To respond when you ask for a demo or support. With your consent, to send product updates you can opt out of at any time.

3. Who we share it with

Stripe processes all payments as a regulated payment institution. Our hosting and email providers process data on our behalf under data-processing agreements. We share data with authorities only where the law requires it. We do not sell personal data to anyone.

4. How long we keep it

Transaction records are kept for as long as tax and commercial law requires. Demo-request details are kept while we are in contact and deleted on request. Receipt emails are kept only to deliver the receipt and service messages about that payment.

5. Your rights

Under the GDPR you can ask us to access, correct, delete or export your personal data, and you can object to or restrict certain processing. Write to hello@mentiaq.com and we will respond within a month. You can also complain to the Spanish supervisory authority (AEPD).

6. Security

All traffic is encrypted in transit, payment credentials are handled exclusively by Stripe, and access to production data is limited to the people who need it to run the service.