Privacy notice
Clear about the small amount of data we use.
This notice explains the information used to provide, secure, bill and support the BuiltBy2 Menus service.
Public menu visitors
Public menus do not require an account and the current product does not set advertising or analytics cookies. Standard hosting logs may include technical information such as an IP address, browser type, requested page and time so the service can be operated securely.
Venue owners and editors
We process the email address used for passwordless sign-in, the venue membership attached to that account, private menu drafts, published versions and a short audit history. Essential session cookies keep the owner area signed in and secure.
Service providers
Vercel provides application hosting and delivery. Supabase provides authentication and database services. Stripe provides payment, subscription and invoice services, and Resend delivers service emails. These providers process data only as needed to run the service. BuiltBy2 does not sell personal information.
Billing information
We retain the venue, billing contact, selected plan, invoice reference, payment status, service dates and Stripe customer or subscription identifiers needed to administer the agreement. Stripe receives payment details on its hosted pages. BuiltBy2 does not store full card numbers, bank-account numbers or Direct Debit mandates.
Venue content and food information
Each venue remains responsible for checking that its prices, availability, dietary labels and allergen information are accurate before publishing. The product keeps the allergen notice enabled by default, but it does not replace a conversation with venue staff.
Retention and your choices
Account and menu data is kept while the service is active. A venue can request its current menu data before cancellation or within 30 days after service ends. Active menu and owner-account data is then removed within 30 days unless it is needed for a dispute or legal obligation. Residual backups expire under the backup schedule. Invoices, agreements and essential payment records are retained for applicable accounting and legal periods.
Privacy requests can be sent to support@builtby2.co.uk.
Last updated 1 September 2026.