Privacy Notice
Last updated 9 October 2026
Controller
Menu Muse, based in France, is the data controller for personal data processed through the Menu Muse service.
Data we collect and why
- Account data (email, password hash) — to create and secure your account. Legal basis: contract.
- Campaign content (business details, uploaded photos, scripts, generated posters, music and videos) — to provide the service. Legal basis: contract.
- Subscription and usage records — to run your plan, its monthly allowance and refunds. Legal basis: contract and legal obligation.
- Technical data (IP address, device and usage logs) — for security, fraud prevention and improving the service. Legal basis: legitimate interests.
- Support messages — to help you. Legal basis: contract and legitimate interests.
Who we share it with
- Service providers that host the app, store files and run AI generation on our behalf.
- Paddle.com, our Merchant of Record, for selling subscriptions, payments, tax compliance and invoicing.
- Social networks you choose to publish to (e.g. Instagram and Facebook), only when you press publish.
- Professional advisers (legal, accounting) and authorities where required by law.
International transfers
Some providers may process data outside the EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.
Retention
We keep account and campaign data while your account is active and delete or anonymise it within 30 days after closure, except records we must keep by law (such as transaction records).
Your rights
Under the GDPR you can access, rectify, erase, restrict or port your data, object to processing, and withdraw consent at any time. We respond within one month. You can also complain to the CNIL (cnil.fr) or your local supervisory authority.
Security
We use encryption in transit, private file storage with expiring links, access controls and least-privilege database rules.
Cookies
We only use essential storage needed to keep you signed in. We do not use advertising cookies.