Mayda
Avis juridique (Modèle : À faire réviser par un avocat pour chaque pays d'exploitation) :

Ce document est un modèle décrivant fidèlement les pratiques de traitement des données de la plateforme (minimisation des données, convives 100% anonymes, zéro cookie, chiffrement AES-256-GCM). Faites-le valider par un avocat qualifié dans chaque pays où vous ou vos restaurants partenaires opèrent.

100% Anonymous Diners

Zero diner cookies, zero fingerprinting, zero trackers. Diners never log in or share any personal identity.

Data Minimization

We collect strictly only the restaurant owner's contact phone number and username credentials.

AES-256-GCM Encryption

All stored phone numbers are encrypted at rest with hardware-accelerated AES-256-GCM and masked in admin screens.

Self-Contained Storage

All 3D assets, fonts, and scripts are hosted directly without third-party requests or surveillance analytics.

Global Privacy Charter

Politique de Confidentialité (Architecture Privacy-by-Design)

International Standard — Compliant with GDPR Principles

1. The Diner Privacy Guarantee (Zero Tracking)

When diners scan a Mayda QR code or open an interactive 3D/AR menu, they remain completely anonymous. The application executes under strict technical constraints:

  • Zero Cookies: No cookies, sessions, or persistent local storage tokens are created or read on public menu and dish pages.
  • No Device Fingerprinting: We do not capture Canvas fingerprints, WebGL telemetry, battery status, or hardware serials.
  • No Third-Party Requests: All 3D assets, AR files, and fonts are self-hosted directly from the platform origin without Google Fonts or external CDNs.
  • Privacy-Preserving Aggregates: Dish and menu view statistics are tracked solely via anonymous aggregate daily counters without IP storage.

2. Data Collected from Restaurant Owners

Under strict principles of Data Minimization, we only collect and process personal data that is strictly required to administer the restaurant's menu:

  • Owner Contact Phone Number: Stored trimmed as entered, encrypted at rest with AES-256-GCM using an authenticated cryptographic key (DATA_ENCRYPTION_KEY). A deterministic HMAC hash is indexed for uniqueness without exposing the number.
  • Login Credentials: Unique username and a salted, cryptographically hashed password (bcrypt).
  • Restaurant Business Content: Restaurant name, menu structure, dish names, descriptions, prices, photos, and 3D models (non-personal commercial content).

3. Data Retention, Export & Right to Deletion

Restaurant owners maintain full sovereignty over their data:

  • Right of Access & Export: Owners can view and export all their menu data, dishes, and 3D models at any time directly through their dashboard.
  • Right of Rectification: Contact phone numbers, preferred languages, and credentials can be updated instantly in Account Settings.
  • Right of Erasure: Upon account termination, all restaurant records, encrypted phone data, photos, and associated 3D models are permanently deleted from database storage.

4. International Transfers & Operator Notice

Mayda operates as an international SaaS platform serving restaurant establishments worldwide. Core application servers and encrypted databases are hosted in certified low-latency data centers under strict technical security controls. The principal operator is headquartered in Tunisia, operating under international standards of data protection and privacy-by-design.