Legal · Data Rights
Data Deletion
You have the right to request deletion of your personal data held by MaxyMenu at any time. This page explains what data can be deleted, how to submit a request, and what to expect.
How to request deletion
Send a deletion request
Email maxymenu@gmail.com with the subject line "Data Deletion Request". Include the email address or WhatsApp number associated with your MaxyMenu account so we can locate your data.
We confirm receipt
We will acknowledge your request within 5 business days. If we need additional information to verify your identity or locate your data, we will ask at this stage.
Data is deleted
We will complete the deletion within 30 days of receiving a valid request. You will receive a confirmation once the process is complete.
Your Right to Erasure
GDPR Article 17
Under the General Data Protection Regulation (GDPR), you have the right to request the deletion of your personal data — also known as the 'right to be forgotten'. This applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent, or where you object to processing and there are no overriding legitimate grounds.
Who can make a request
Any individual whose personal data is processed by MaxyMenu may submit a deletion request. This includes restaurant operators, staff members with accounts, and any person who has interacted with the platform.
What Data Will Be Deleted
Account data
Your login identifiers, account information, and profile details will be permanently removed from our systems.
Menu content
Menu content, update history, and any media files (such as dish photos) linked to your account will be deleted.
WhatsApp interaction data
Records of WhatsApp messages processed for menu updates associated with your account will be removed.
Usage and analytics data
Any identifiable usage data tied to your account will be deleted. Aggregated, anonymised data that cannot be linked back to you may be retained.
Exceptions and Limitations
Legal retention obligations
Some data may need to be retained beyond your deletion request to comply with legal obligations — for example, financial or tax records required by applicable law. We will inform you if this applies to any part of your data.
Third-party processors
MaxyMenu uses third-party service providers (such as cloud infrastructure and AI model providers) who may hold copies of data processed on our behalf. We will notify relevant sub-processors of your deletion request, but cannot guarantee immediate deletion from all third-party systems. We will confirm once deletion has been completed across our primary systems.
Backups
Data may persist in encrypted backup systems for a limited period after deletion from live systems, after which it will be purged as part of our regular backup rotation.
Timeframe
30-day commitment
We will action all valid deletion requests within 30 calendar days of receipt. If your request is particularly complex or you have multiple accounts, we may extend this period by up to an additional 30 days, and will notify you of the extension.
Confirmation
You will receive a written confirmation at the email address you used to submit your request once your data has been deleted.
Complaints and Supervisory Authority
Contact us first
If you are not satisfied with how we have handled your deletion request, please contact us at maxymenu@gmail.com so we can try to resolve the issue.
AEPD
If you are located in Spain or the EU and remain unsatisfied, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at aepd.es, or with the supervisory authority in your country of residence.