Compliance & Data Privacy Center

Privacy Policy

At DrinkMenu, we prioritize the protection and security of your personal data. This privacy policy details our PIPEDA & GDPR-compliant disclosures regarding email authentication, rate limiting, and content hosting.

What We Collect

Email Address: Used exclusively for Magic-Link authentication codes to verify user accounts and assign administrative roles.
IP Addresses: Dynamically recorded for rate-limiting calculations to secure server stability.
User Content: Uploaded recipes, custom drink parameters, and cocktail cover images.

Data Processing & Hosting

Our codebase is deployed securely on the **Vercel Serverless Platform**. All backend data queries and user profile storage are securely routed and processed transactionally inside the **InstantDB Database Hosting Environment**. No data is shared with third-party advertising services.

Right to Erasure (Deletion)

Under GDPR and PIPEDA regulations, you maintain absolute control over your digital footprint. To request the complete, irreversible erasure of your email record and all associated uploaded content from our active databases, please contact us at info@drinkmenu.ca. Requests are completed transactionally within 30 days.