Privacy Policy

Scope and roles
This policy covers the MyBon website, business accounts and QR menus hosted through MyBon. The service operator is identified at the end of this page. The venue providing products and services is a separate party; also read that venue’s notice.

Information processed
Enquiries include your name, business, email, phone and message. Business accounts involve authorized-user details, access records, subscriptions, offers and support communications. Menu membership may store a nickname, email, full name, phone, birth date, password hash, verification and session records, depending on the fields and features in use. Passwords are not stored as plain text.

Menu activity
Enabled features and your choices may involve favorites, language and appearance settings, permissions, visit counts, session time, last-seen information, recommendation answers and member discounts. Registration and login can also record IP addresses and network information supplied by the browser. Optional visit measurement and viewed-product history depend on your privacy choices. Measurement uses hashes of random identifiers; this does not make all records anonymous. Server and security logs may separately contain IP addresses and request details.

Access
Venue staff access their own business’s information within assigned permissions. The customer screen may show a nickname or masked nickname, birthday, visits, favorites, permissions, rewards and certain IP/network records. Technical and database access may reach broader fields. MyBon does not use venue customer data for its own marketing. Authorized technical access must be limited to operating the service, maintenance, security, abuse prevention, support, troubleshooting and legal obligations. We do not claim that MyBon cannot access data.

Providers and AI
Necessary information may be processed by hosting, email and enabled AI providers within their tasks, or disclosed to authorized authorities when required. The AI integration supports OpenAI or Google Gemini, depending on configuration. Menu images, product text, portion information, translations, language, taste preferences and relevant recommendation conversation may be sent to the provider. Direct identity and contact details are not needed for recommendations: do not include unnecessary personal or sensitive information in images or free text. Applicable international-transfer requirements must be met separately; using the site is not blanket consent to such transfers.

Retention and requests
Information should be retained for its purpose and applicable legal retention duties. Ending a session does not immediately delete all records; logs and backups have separate lifecycles. Direct account, correction and deletion requests to the responsible party: the venue for its customer processing, or MyBon for its own processing. Identity checks should ask only for necessary information. See the Personal Data Notice for rights and request procedures.