Privacy Policy — Azcarte

1. Who We Are

Azcarte is operated by GEDARK SOLUTIONS, a French company registered under SIRET 90255785900011, with its registered office at 74100 Ville-la-Grand, France.

For any privacy-related enquiries, contact us at: support@azcarte.com

2. What Data We Collect

Account data (venue owners and staff)

Full name and email address
Business name, city, and country
Billing information — handled exclusively by Stripe; Azcarte never sees or stores your full card details

Usage analytics

When a visitor scans a QR code or views a digital menu we record anonymised analytics: a session identifier (hashed, not linked to any individual), device type, browser language, and QR code identifier. We do not store IP addresses for analytics.

Technical logs

Server logs may retain IP addresses for up to 30 days for security and fraud-prevention purposes (e.g. detecting spam account creation). These logs are not used for marketing and are deleted automatically.

3. How We Use Your Data

To provide and operate the Azcarte service
To send transactional emails (account verification, billing receipts, welcome emails)
To detect and prevent spam or fraudulent registrations — registration details are sent to a third-party AI classifier (xAI) for this purpose
To generate translation drafts when you use the assisted translation feature — menu content is sent to xAI for this purpose only; it is not used to train AI models
To provide aggregated, anonymised analytics to venue owners about their menu views
To process payments and manage subscriptions via Stripe, including plan upgrades, downgrades, and billing cycle changes

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 4.

4. Third-Party Processors

Processor	Purpose	Data transferred
Stripe	Payment processing and subscription management	Name, email, billing address, subscription status
xAI	Assisted menu translation; spam classification during registration	Menu content (dish names, descriptions) for translation; registration data (name, email, venue name) for spam detection
Email provider	Transactional emails	Name, email address
Hosting provider	Infrastructure	All service data (server-side only)

All processors are contractually bound to process data only on our documented instructions and in compliance with GDPR.

5. Cookies

Azcarte uses only a session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party cookies. No cookie consent banner is required.

6. Data Retention

Account data is kept for as long as your account is active
After account deletion, personal data is deleted within 30 days
Billing records are retained for 10 years as required by French accounting law
Security logs are retained for 30 days then deleted automatically

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your data
Portability — receive your data in a machine-readable format
Objection — object to certain processing activities
Restriction — request that we limit how we use your data

To exercise any of these rights, email support@azcarte.com. We will respond within 30 days.

You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

8. Data Security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt. Access to production data is restricted to authorised personnel only.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of any material changes. The date at the top of this page always reflects the most recent revision.

10. Contact

GEDARK SOLUTIONS
74100 Ville-la-Grand, France
SIRET 90255785900011
support@azcarte.com