Privacy

Cartemark compares a restaurant owner's own menu with the market. You give us your menu by pasting it, linking to it or uploading it; we read it once and keep nothing unless you save it. The market is menus venues publish on their own websites, only ever shown together as medians and ranges, never one venue at a time.

The menu dataset is built from public sources: venue websites (read politely), OpenStreetMap (ODbL, attribution), the Internet Archive Wayback Machine (historical menus), Wikidata (dish taxonomy) and FoodOn (ingredient taxonomy). Dish extraction and normalisation run through Lotl AI. Owner accounts sign in through Lotl Auth and pay through Lotl Pay, which uses Stripe. A venue can ask for its menu data to be corrected or removed. A menu an owner submits is read through Lotl AI; a linked page is fetched once by our server.

What we collect

We collect and store the following:

Menu data: Public menu facts fetched from venue websites and OpenStreetMap: venue names, dishes, prices and diet flags. No personal data.Stored on our server. Kept permanently. The time series is the product; menus are kept as an append-only history. Legal basis: legitimate interests. Removable when you delete your account.
Your account: Your Lotl account id, your Cartemark plan, and your subscription status and renewal date. Sign-in runs through Lotl Auth, our account service. Payments run through Lotl Pay, our payment service, which uses Stripe to take the card.Stored on our server. Kept until you delete it. Kept while you have an account. A cancelled subscription keeps its status so the account page can show it. Legal basis: contract (needed to run the service). Removable when you delete your account. Shared with: Stripe, Lotl Auth.
API keys: A fingerprint (hash) of each API key you create, its first characters, the name you gave it, and when it was created and last used. The key itself is shown to you once and never stored.Stored on our server. Kept until you delete it. A revoked key is kept as revoked so it can never work again. Legal basis: contract (needed to run the service). Removable when you delete your account.
Your saved menus: Menus you choose to save to your account: the name you give, the cuisine, and the dishes and prices read from what you gave us. A menu you do not save is read once and not kept.Stored on our server. Kept until you delete it. Deleted when you delete the menu, or your Lotl account. Legal basis: contract (needed to run the service). Removable when you delete your account. Shared with: Lotl AI (DeepSeek).
Tool usage counts: Which tool was asked for, from which surface (web, API or assistant), on which plan, and whether it was answered. Never who asked, which venue, or what was typed.Stored on our server. Kept permanently. Counts only: this is how we decide which areas and cuisines to cover next. Legal basis: legitimate interests. Not individually deletable.
Connected assistants: When you connect an AI assistant: the name it registered with and the addresses it may send you back to, and, while you are approving it, a short-lived one-use code. The access it gets is an API key listed on your account page.Stored on our server. Kept until you delete it. Approval codes expire after ten minutes; the key lasts until you revoke it. Legal basis: contract (needed to run the service). Removable when you delete your account.

Third parties

These external services receive some of your data:

Internet Archive Wayback Machine — Historical menu snapshots for the time series backfill
OpenStreetMap — Venue discovery (coordinates and website tags, ODbL attribution)
Stripe — Pro subscription billing (via Lotl Pay, our payment service)
Wikidata and FoodOn — Dish and ingredient taxonomy seeds

Your rights

You can export everything we hold about you, and delete your account at any time. Both options live in your account settings. Deletion is immediate and unrecoverable.

Last updated: 2026-10-12.