Privacy Policy

Last updated: 18 July 2026

Menu Studio (menustudio.org) helps restaurants and cafes build menus and publish a LINE ordering flow, and lets customers browse those menus and place orders. We keep the amount of personal data we handle to a minimum, and we run no advertising or third-party analytics. This policy explains what we collect, why, and the choices you have. Personal data is handled in line with Thailand’s Personal Data Protection Act (PDPA, B.E. 2562).

Two kinds of people use Menu Studio, and their data footprints differ. The two sections below describe each.

If you sign in to manage a menu

Menu owners sign in with Google. We do not run our own password system. When you sign in, Google shares a basic profile with us and we store your name, email address, profile image URL, and a Google account identifier used to recognise you on your next visit. We use this only to authenticate you and to associate the menus you claim and edit with your account.

The menu content you create — venue details, sections, items, prices, and the Bill Payment details you enter for ordering — is stored so it can be published and shown to your customers. Draft edits you have not published are kept private until you publish them.

If you order from a menu

Customers browse a published menu and order through LINE (via the LINE LIFF SDK). When you place an order we store the items and quantities, the order total, the delivery location you pick, and a short reference code so the order can be identified. We do not store your name or phone number on our servers as part of an order. Your cart is held in your own browser (local session storage) until you check out.

Payments

Payment is completed with a LINE Bill Payment / PromptPay QR code that you scan in your own banking app. Menu Studio never sees or stores your card number, bank login, or banking credentials — the QR only carries the merchant’s Bill Payment reference and the amount.

Third parties

We rely on a small number of service providers to make Menu Studio work:

• Google — sign-in for menu owners. Google authenticates you and shares your basic profile (name, email, image) with us. See Google’s own privacy policy for how Google handles your account.
• LINE — the ordering interface runs inside LINE, and order confirmations may be delivered to you as a LINE message. LINE handles that messaging under its own privacy policy.
• Banking / PromptPay rails — the QR payment is processed by your bank and the Thai payment network, not by us.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Cookies & local storage

We use only functional, essential storage — no advertising cookies and no third-party analytics, so no cookie-consent banner is needed. Specifically: a sign-in session cookie keeps menu owners logged in, and your browser’s local storage holds things like your editor draft, your cart, and your language preference. That local storage stays in your browser and is not used to track you.

Your rights

Under the PDPA you may, in respect of your personal data:

• access a copy of it;
• have it corrected if it is inaccurate;
• request that it be deleted;
• withdraw consent where processing relies on it.

To exercise any of these, email [email protected] and we will action your request within a reasonable period. We keep personal data for as long as your account or menu is active, or as needed to operate the service, and remove it on request as described above.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page, and material changes will be reflected here.

Contact

Questions about this policy or your data? Email [email protected].