Privacy
Last updated 3 September 2026
Buenpro is a service of Compass Tech Labs LLC, a Massachusetts limited liability company. There are two kinds of people in this policy: restaurant owners, who have an account with us, and diners, who open a published menu without one. What we hold about each is different, and most of this page is about keeping that difference clear.
We do not sell your information or your diners’ information. Not to advertisers, not to data brokers, not to anybody, at any price, for any purpose. There is no advertising business here to sell it to and there is not going to be one.
We do not share it either, with one honest exception that is worth stating plainly rather than burying: a handful of companies run parts of the service for us — the database, the hosting, the payments, the menu reader — and each receives only what it needs to do its part. They work under contract, on our instructions, and none of them may use what they see for anything of their own. They are all named further down this page.
The only other time anything leaves us is if the law requires it — a valid court order, a subpoena, or a legal obligation we cannot refuse. If that ever happens and we are permitted to tell you, we will.
To give you an account we keep whichever identifier you sign in with — an email address, a mobile number, or the name and email on the Google account you chose. There are no passwords in this product, so we never hold one.
We keep what you put into the product, because that is the product: your menus, dishes, prices and descriptions, your photographs, your hours, your address and phone number, and the links you add. It is yours. You can export it at any time, on every plan including the free one.
If you invite somebody to your account we keep the address you invited and who invited them, until the invitation is accepted or cancelled.
When you send feedback from inside the console we keep what you wrote, the screen you were on, your window size and the build you were running. Those last three are attached automatically and are shown to you before you send.
A published Buenpro page sets no cookies, loads no third-party script, and stores no identifier that follows you anywhere. There is no cookie banner because there is nothing to consent to.
We do count how a page is used, so the restaurant can see whether it is working. Each event records the page, what was tapped, the language it was read in, the kind of device, the site you arrived from, and a country. To count daily visitors without knowing who they are, we build a short one-way hash from your IP address, your browser, the restaurant, and a secret that changes every midnight UTC. The IP is used to make that hash and to work out the country, and is then discarded — it is never written down. Because the secret rotates, the hash cannot be joined up across two days.
Raw events are kept for 90 days and then deleted. What remains is a daily total with no per-visitor rows in it at all.
One thing is stored in your own browser: if you make the text bigger, that preference is saved there so the page remembers it. It never reaches us.
We use a small number of companies to run the service. They only ever receive what they need to do their part.
Each of these is bound by its own contract with us to use what it handles only to provide its service. None of them is permitted to sell it, and neither are we.
Your content stays until you delete it. It is never removed because of a lapsed payment, an ended trial or a downgrade — the page stays live and the content stays put.
If you ask us to delete the account, the published page comes down straight away and everything is scheduled for permanent deletion 30 days later. During those 30 days you can undo it with a link we email you. After that the rows are deleted, the photographs are purged from storage, any subscription is cancelled and any custom domain is disconnected.
Analytics events are deleted after 90 days, as above. Emails we have sent you are kept as a record that we sent them.
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Export is built into the product and does not need us. For anything else, write to us and we will answer.
If you are in a place with laws that give you further rights over your data — the UK, the EU, California and others — you have them, and asking is how you use them. We do not ask you to prove where you live before we will help.
You decide what goes on your page. Buenpro stores it and shows it; we do not review it, verify it or correct it. We are the channel your information travels through, not the author of it.
That matters here in one specific way: if you type somebody else’s personal information into the product — a customer’s number in a note, a supplier’s address, a photograph with a person in it — you are the one who decided to collect it, and having the right to is yours to establish. We hold it because you put it there.
How responsibility divides between you and Compass Tech Labs LLC for anything published through Buenpro is set out in the terms, not here. This policy answers a narrower question: what we hold, why we hold it, and what happens to it.
Buenpro is a tool for running a business. It is not for children and we do not knowingly collect anything from one.
If this policy changes in a way that matters, we will tell account holders by email rather than quietly changing the date at the top. The date at the top will change too.
Write to marco@compasstechlabs.com, or by post to Compass Tech Labs LLC, {{POSTAL_ADDRESS}}. A person reads it.