Privacy Policy
Last updated: April 5, 2026
This Privacy Policy explains how Bytzo Inc. (“EditCanvas”, “we”, “us”, or “our”) collects, uses, discloses, and protects information when you use EditCanvas, a digital menu creation and management platform.
By accessing or using EditCanvas, you agree to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide
When you create an account or use EditCanvas, we may collect:
- Email address
- Mobile phone number (for one-time password (OTP) authentication)
- Name and basic profile information
- Business details (restaurant name, address, menu content, prices, images)
- Uploaded files (such as images or PDFs of menus) which may be processed to extract, convert, and recreate menu content into editable formats
- Communications you send to us (support requests, feedback)
1.2 Authentication Information
EditCanvas uses trusted third-party authentication services such as Firebase Authentication and Google Sign-In.
- We do not store passwords
- OTPs are used only for login and verification
- OTP codes are not stored after verification
- If you sign in with Google, we may receive limited profile data such as your name, email address, and profile image, as permitted by Google
1.3 Automatically Collected Information
We may automatically collect:
- IP address
- Browser and device information
- Usage data (pages viewed, features used)
- Log and diagnostic data for security and troubleshooting
This information helps us maintain, secure, and improve EditCanvas.
2. How We Use Your Information
We use collected information to:
- Produce, operate, and maintain EditCanvas
- Authenticate users and secure accounts
- Process uploaded images and files to generate editable menu designs, layouts, and structured data based on user input
- Create, host, and display digital menus
- Sync menu content with third-party platforms upon user request
- Communicate important service updates
- Improve performance, usability, and reliability
- Prevent fraud, abuse, and security incidents
3. Third-Party Integrations
3.1 Google Business Profile
If you choose to connect EditCanvas with Google Business Profile:
- You explicitly authorize EditCanvas to access and update your business menu data
- Actions are performed only upon your request
- EditCanvas does not modify Google data without your consent
Google services are governed by Google’s own privacy policies and terms.
3.2 Other Service Providers
We may use third-party infrastructure, analytics, and hosting providers to operate the service. These providers process data only as necessary to perform services on our behalf.
4. Live Menu URLs & Public Access
EditCanvas may generate live or shareable menu URLs.
- These URLs may be publicly accessible depending on your settings
- Anyone with the link may view the menu
- EditCanvas does not control how third parties display or access these URLs
- You are responsible for sharing and embedding menu URLs
5. User Content Processing Disclaimer
EditCanvas processes content solely based on user actions (such as uploads or cloning requests).
- We do not verify ownership, legality, or intellectual property rights of uploaded content
- Users are responsible for ensuring they have the right to upload and use such content
- Processing is automated and performed to provide the requested features
6. Data Sharing & Disclosure
We do not sell personal data. We do not sell, rent, or commercially exploit user-uploaded content.
We may share information only:
- With service providers acting on our behalf
- When required by law or legal process
- To protect the rights, safety, or security of EditCanvas, users, or the public
- In connection with a merger, acquisition, or asset transfer
7. Data Retention
7.1 General Retention
We retain information:
- While your account is active
- As needed to provide the service
- As required by legal, accounting, or security obligations
7.2 Uploaded Files and Generated Outputs
Uploaded images and files may be temporarily stored to process and generate outputs.
- Files may be retained for a limited period to support editing, downloads, and re-access
- We do not use uploaded content for resale or external distribution
- We do not use user content to train general-purpose AI models (unless explicitly stated and consented in the future)
You may request account deletion, after which data will be deleted or anonymized unless retention is legally required.
8. Data Security
We use reasonable technical and organizational safeguards, including:
- Secure authentication mechanisms
- Encrypted data transmission
- Restricted access controls
8.1 Uploaded Content Security
Uploaded content is processed using secure systems and access controls. Access to such content is limited to what is necessary to provide the service.
No system is completely secure, and absolute security cannot be guaranteed.
9. Your Rights & Choices
You may:
- Access or update your account information
- Request deletion of your account
- Control optional integrations and features
10. Children’s Privacy
EditCanvas is not intended for individuals under 18. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on this page with a revised “Last updated” date.
Continued use of EditCanvas indicates acceptance of the updated policy.
12. Contact Information
For questions or requests regarding this Privacy Policy:
13. GDPR Privacy Rights (EEA, UK & Switzerland)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR).
- Right to access your personal data
- Right to correct inaccurate data
- Right to request deletion of data
- Right to restrict or object to processing
- Right to data portability
Legal bases for processing
We process personal data based on:
- Contractual necessity (to provide EditCanvas)
- User consent (for optional features and integrations)
- Legitimate interests (security, performance, improvement)
- Legal obligations
To exercise GDPR rights, contact hello@editcanvas.ai.
14. CCPA / CPRA Privacy Rights (California Residents)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
- Right to know what data we collect
- Right to access your data
- Right to correct inaccurate data
- Right to request deletion
- Right to opt out of sale or sharing
Important clarifications
- EditCanvas does not sell personal data
- EditCanvas does not share data for targeted advertising
You may exercise these rights by contacting hello@editcanvas.ai. We will not discriminate against users for exercising privacy rights.
15. International Data Transfers
Your data may be processed in countries other than your own. Where required, appropriate safeguards are used to protect your data under applicable laws.
16. Do Not Track
EditCanvas does not currently respond to browser “Do Not Track” signals due to lack of an industry standard.