Carta Privacy Policy

1. Information Carta processes

Carta processes the email address and profile name used for account access. It also stores the restaurant information, menu text, prices, categories, languages and images that you choose to add to the service.

2. Menu photo and AI processing

When you ask Carta to extract or edit a menu with AI, the relevant menu photo and text are sent to OpenAI to fulfill that request. Do not upload payment details, identity documents or other sensitive personal information. Carta does not use restaurant menu content to train its own AI model.

3. Public menus

A menu becomes publicly accessible at its web address after you publish it. Anyone with that address or its QR code can view the published restaurant name, logo, menu content and prices. Draft menus remain inside the authenticated workspace.

4. Service providers

Carta uses Supabase for account access and database services, Cloudflare including R2 object storage for application hosting and file delivery, and OpenAI for requested menu extraction and assistant features. These providers process only the information needed to operate their part of the service under their own security and privacy terms.

5. Diagnostics and usage data

Released Carta apps are configured to use Firebase Crashlytics for crash diagnostics and may use Firebase Analytics for product usage measurement. This can include device and app version, approximate region, screen activity, session information and diagnostic details. Carta does not show third-party advertising and does not sell personal information.

6. Purchases

When in-app subscriptions become available, Apple or Google will process the payment details. Carta will receive and store purchase status, product identifier and entitlement information, but not the full card number.

7. Retention, deletion and security

Carta keeps account and restaurant data while the account is active and as needed to provide the service, meet legal obligations and resolve disputes. You can request account and content deletion by contacting dev@nantestudio.com. Reasonable technical and organizational safeguards are used, but no online service can guarantee absolute security.

8. Contact

Nante Studio
dev@nantestudio.com
https://nantestudio.com/support