Privacy Policy
Effective date: October 27, 2026
Zullit (https://zullit.com) provides restaurant websites, digital menus and order-management tools. This policy explains how Zullit handles account, restaurant and visitor information. Privacy and support contact: [email protected].
Information we collect and why
For email registration we collect your email address and store a one-way hash of your password. We generate an internal username. During setup you may provide restaurant and branch names, addresses, phone numbers, menus, images and domain settings. We use this information to operate your account, publish the content you choose to make public and provide the features in your plan.
Orders and reservations may contain customer names, contact details, delivery addresses, selected items and transaction details. The restaurant receives this information to fulfil the request. Restaurant operators are responsible for their own handling of their customers' data. Server and security logs may include IP addresses, browser information, request times and errors, for service operation and abuse prevention.
Sign in with Google
Google sign-in is optional; email and password registration is also available. We request only openid, email and profile. Google provides a unique account identifier, email address and verification status, and basic profile information such as your name. We use the identifier and verified email to authenticate you, create or link your Zullit account, and use your name to initialize your account profile. A profile image may be returned by Google but Zullit does not save it through this sign-in integration.
We do not request access to Gmail messages, Drive files, contacts or calendars. Google access tokens are used transiently to retrieve your identity during sign-in; this integration does not persist Google access or refresh tokens. Google sign-in data is not sold, used for advertising, shared with advertising platforms or used to train AI models. It is not automatically sent to the Mina assistant. Zullit's use of information received from Google APIs adheres to the Google API Services User Data Policy, including applicable Limited Use requirements.
Payments, service providers and optional tools
Paid platform subscriptions are processed through Whop. The checkout receives the account contact email, chosen plan, amount and transaction identifiers needed to process and reconcile payment. Payment-card entry is handled by the payment provider; this subscription integration does not store full card numbers or card security codes. Whop handles payment data under its own privacy terms. Hosting and email service providers process information necessary to deliver the service. Information may be processed in countries other than your own.
If you use the optional Mina assistant, your messages and recent conversation context may be sent to Groq to generate replies; contact details or restaurant information you include may be stored as leads or support tickets. Do not send passwords, payment-card details or other secrets in chat. Optional embedded support, analytics, anti-abuse or messaging services, where enabled, may process browser and interaction information under their own policies.
Cookies and public content
Essential cookies maintain your login, language, security state and signup/payment flow. Optional third-party features may set their own cookies when enabled or used. You can control cookies in your browser; blocking essential cookies can prevent login and checkout. Published restaurant pages, menus, branch contacts and images are public. Only publish information you intend to share.
Storage, security and retention
We use HTTPS, hashed passwords, encrypted application credentials and access controls. Access is limited to service operation, authorized support, security and legal needs. No system guarantees absolute security. Account information is retained while needed to provide the service. Transaction, security and legal records may be retained where required for accounting, disputes, fraud prevention or applicable law; backup copies may persist until they rotate out. We do not promise immediate deletion of every backup.
Your choices, access and deletion
You can edit account and restaurant information through your dashboard. To request access, correction, export, Google-account unlinking or deletion of your Zullit account and associated Google data, email [email protected] from your registered email address, identifying the account and request. We verify ownership before acting. We remove data no longer needed, subject to legal and transaction-retention obligations, and explain any applicable retention. Ensure you have another usable sign-in method before unlinking Google.
You can also revoke Zullit's access in your Google Account connections. Revoking access prevents future Google authorization but does not automatically delete your Zullit account; send a deletion request if that is what you want.
Other disclosures and updates
We may disclose information when legally required, to protect service security or to service providers performing the operations described above. The service is intended for restaurant businesses and is not directed at children. Contact us about data submitted by a child. We publish policy updates here with an updated date and provide additional notice or consent where required for materially different data uses.