We collect the minimum needed to operate the API: the email address you sign up with, your API key, and per-request logs (timestamp, endpoint, status) used for billing, rate limiting, and abuse prevention.
Menu data is collected from restaurants' own publicly published websites and documents. We do not collect personal data about restaurant staff or diners.
We do not sell customer data or share it with advertisers. Sub-processors are limited to infrastructure and payment providers.
Request logs are retained for 12 months. To access or delete your account data, email juan@culinayr.com.