Compliance

This page outlines how Menyo aligns with relevant privacy and data protection frameworks and the controls we maintain across data handling, subprocessors, and retention.

GDPR

• Consent management with granular categories and auditable logs.
• Data subject rights: export and deletion request workflows available in the dashboard.
• Limited retention for raw analytics and pseudonymised logs; legal exceptions for invoices.

Learn more on our GDPR page.

Subprocessors

We use reputable third-party providers to deliver parts of our service. We maintain data processing agreements (DPAs) and, where applicable, standard contractual clauses (SCCs).

• Identity & Auth
• Payments & Invoicing
• Hosting & Storage
• Analytics (optional)

See the draft list in Privacy Policy and internal documentation.

Data Retention

We follow documented retention schedules. Raw logs are retained for limited periods and aggregated metrics retained longer for product improvements. Legal records are kept per applicable law.

Internal reference: retention policy and processing records.

Legal

• Privacy Policy
• Terms of Service
• Cookie Policy