1. Introduction
This Privacy Policy explains how Higgs Software ("we", "us", "our") handles personal information when you use Higgs Menu (the "Service"). It applies to Merchants, their staff, and customers who interact with the Service.
2. Information We Collect
Account information such as your name, email address, and password (stored only as a secure hash).
Business information such as your restaurant’s name, menus, pricing, and settings.
Order and transaction data generated through the Service.
Technical data such as device, browser, and usage information collected automatically.
3. How We Use Information
We use personal information to provide and operate the Service, process orders and payments, authenticate users, provide support, improve and secure the platform, and comply with legal obligations.
4. Sign in with Google
If you sign in with Google, we receive your verified email address and basic profile information (such as your name) from Google in order to create or access your account. We do not receive your Google password. Your use of Google sign-in is also governed by Google’s privacy policy.
5. Sharing of Information
We do not sell your personal information. We share it only with service providers who help us operate the Service (such as hosting providers, payment processors, and AI providers), with Merchants where you are their customer, and where required by law or to protect our rights.
Online payments are handled by third-party payment processors — Stripe in Canada and Bonum in Mongolia. When a payment is made or received, the information needed to process it (such as the amount and the card or transaction details) is provided to and handled by the relevant processor under its own privacy policy. We do not store full card numbers on our own systems.
6. AI Features
Some features use third-party AI providers to generate content or assist with operations. Data sent to these providers is limited to what is needed to perform the requested task.
If a Merchant connects the optional Telegram management agent, messages that address the bot in the connected group are received through Telegram and sent to our AI provider to carry out the requested action. Only messages directed at the bot are processed; use of Telegram is also subject to Telegram’s own terms and privacy policy.
7. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter only as required to meet legal, accounting, or reporting obligations.
8. Security
We use technical and organisational measures to protect personal information, including encryption in transit and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your Rights
Depending on your location, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us using the details below.
10. Cookies and Local Storage
We use cookies and similar technologies, including browser local storage, to keep you signed in and to remember preferences such as your language and theme. You can control cookies through your browser settings.
11. Children’s Privacy
The Service is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us.
12. International Transfers
Your information may be processed in countries other than your own. Where it is, we take steps to ensure it receives an adequate level of protection.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email, and the "last updated" date will be revised.
14. Contact
For privacy questions or requests, contact us at higgs.menu@gmail.com.