Privacy Policy

Version 1.0.1 · effective 2026-04-18

Privacy Policy

Version 1.0.1 Last updated: April 18, 2026

In plain English — the TL;DR

Axiom Ops LLC provides software for F&B operations. This Policy covers what we collect, why, who we share it with, and your rights.

For some data we are the direct controller (your account, device info, app usage); for data that flows in through your employer (your role, shifts, write-ups), we are the processor acting on your employer's instructions — direct rights requests to your employer first.

We use Google LLC (Gmail, OAuth, Places) and Anthropic PBC (AI assistant) as named subprocessors. All other subprocessors are disclosed by category, and the current list is available on request.

We do not sell or share your personal information in the CCPA/CPRA sense, and we don't train AI models on your data — Anthropic is contractually prohibited from training on it.

California, plus 15 other US states, have specific privacy-rights sections below. Minimum age 16 (nothing under 13).

1. Scope and Roles

This Privacy Policy describes how Axiom Ops LLC ("Axiom Ops," "we," "us," or "our"), a Delaware limited liability company, collects, uses, discloses, and retains personal information in connection with Axiom Ops LLC's mobile and web applications and related services (the "Service"). This Policy applies to end users of the Service (including owners, managers, and employees) and to visitors of Axiom Ops LLC's websites.

Axiom Ops LLC plays two different roles depending on the data category:

Direct controller / business (we decide the "why" and "how"): account credentials you create with us; device and usage data about your interaction with the Service; diagnostic data (errors, crashes, performance); optional coarse location (when you enable it); push-notification tokens; website visit data on our public sites; correspondence you send us at our published email addresses.
Processor / service provider for your employer (your employer decides the "why" and "how"; we act on documented instructions): data about your role, shift assignments, availability, schedule history, tasks and checklists, write-ups, team-chat messages in work channels, work photos, and Gmail-ingested operational reports your employer has authorized us to parse.

Where we act as a processor for your employer, your individual-rights requests should typically go to your employer first; we will provide reasonable assistance to the employer so they can respond. Where we act as a direct controller, you can reach us directly as described in Section 17.

References in this Policy to "the Service" mean Axiom Ops LLC's mobile and web applications and related services, including any successor, replacement, or renamed application or service. The Service is not tied to any particular branded product name.

2. Categories of Personal Information We Collect

We collect the following categories of personal information. Not every user generates data in every category; what we collect depends on which features you use.

Identifiers. Name, email address, phone number (including verification codes), user ID, employer / franchise organization ID, authentication tokens, and, for certain sign-in flows, Google account identifier.
Employment-adjacent information (in our role as processor for your employer). Role (owner, manager, employee), assigned store(s), job role or title, pay rate metadata (where your employer provides it for scheduling or labor-projection features), hire date as recorded by your employer, shift assignments, availability submissions, shift swaps, write-ups, task and checklist assignments and completions, team-chat messages within work channels, and related work records.
Device and usage information. Device type, operating system, model, language, time zone, app version, Expo push token, coarse IP-based location, approximate region derived from IP, diagnostic identifiers used for crash reporting, and telemetry about which screens and features you use and when.
Coarse location (optional). When you enable location permissions for features that need location (for example, store-association features), we may collect coarse location data. You can turn this off at any time in device settings.
Content you create. Team-chat messages in work channels, messages to our AI assistant (Sage), photos you upload (e.g., task-verification photos), task comments, availability notes, shift-swap reasons, and other content you submit.
Gmail-ingested email content (owner-side feature). With the owner's explicit OAuth grant, and limited strictly to operational reports that match configured patterns (e.g., daily-sales, payroll, and product-mix reports), we parse the content of emails delivered to the owner's Gmail account and extract structured data for use within the Service. See Section 7 for our Gmail Limited Use affirmation.
Support and feedback content. Messages and attachments you send us through in-Service support flows or to our contact email addresses, including the context of your device and account at the time of the message.
Biometric-unlock preference. If you enable biometric unlock, Axiom Ops LLC stores only a boolean flag ("biometric unlock on/off") and a locally encrypted unlock token on your device; your fingerprint or face data remains on your device and is never transmitted to us.

We do not knowingly collect the following without your explicit, informed consent: social-security numbers, driver's license numbers, passport numbers, biometric templates (e.g., fingerprints, face templates) as a distinct category separate from device-managed biometric unlock, payment-card numbers (we process payments through third-party processors and do not store card data ourselves), precise geolocation, health information, sexual-orientation data, religious beliefs, union membership, or content of non-work private communications.

3. Sources of Information

We collect personal information from the following sources:

Directly from you — when you sign up, enter account information, write messages, submit tasks, upload photos, configure preferences, interact with AI features, or contact us.
From your employer — when your employer invites you, assigns you to a store or role, submits schedules, records write-ups, grants Gmail access (owner only), or otherwise provides data about you through the Service.
From your device — automatically collected diagnostic, performance, push-token, and optionally coarse-location data when you use the Service.
From third-party integrations — data returned by Google (Gmail-ingested content for owners who enable it; OAuth account info for sign-in; Places data for store addresses the owner sets up), by push-notification delivery providers, by error-monitoring providers, and by other integrations described in Section 5.
From public sources — limited public business data (e.g., store addresses) used to configure the Service.

4. How and Why We Use Personal Information

We use personal information for the following purposes, each tied to a lawful basis under applicable law (typically performance of a contract, legitimate interests, or legal obligation, with consent for specific optional uses):

Service delivery. Authenticate you, maintain your account, provide scheduling / tasks / chat / briefings / analytics / AI features, route push notifications, and keep the Service running as you expect.
Operational reports (owner side). Parse Gmail-ingested emails that match owner-configured patterns to extract structured operational data (sales, payroll, product mix) and present it back to the owner.
AI features. Provide advisory AI insights through our LLM provider (currently Anthropic PBC), under an enterprise contract that prohibits training on customer data.
Security and fraud prevention. Detect and respond to abuse, unauthorized access, account takeover, scraping, and other threats; rate-limit API usage; investigate security incidents.
Product improvement and analytics. In aggregated and de-identified form, study how features are used so we can prioritize improvements.
Customer support. Respond to your questions and complaints, investigate issues, and track support tickets through resolution.
Notices and notifications. Send transactional emails, SMS, and push notifications about account events, schedule changes, shift swaps, task assignments, alerts, and similar operational signals.
Legal compliance. Respond to valid legal process, enforce our agreements, investigate potential violations, and comply with tax, accounting, records-retention, and other legal obligations.
Corporate transactions. Evaluate, negotiate, and complete mergers, acquisitions, financings, or reorganizations, subject to customary confidentiality obligations and with personal information treated consistently with this Policy.

We do not use personal information for behavioral advertising targeted at individual users, and we do not sell or share personal information for cross-context behavioral advertising.

5. Disclosures to Third Parties — Hybrid (Named + Categorical)

Delivering the Service requires us to work with a network of subprocessors and integrations. We disclose two vendors by name because disclosure is required or strategically important. All other subprocessors are disclosed by category, with a current list available on request.

5.1 Named subprocessors

Google LLC — we use Google for (i) Gmail ingestion of operational reports (owner-side, with OAuth consent, limited to matching subject/sender patterns); (ii) OAuth authentication for sign-in where applicable; and (iii) Google Places / geocoding for setting up and verifying store addresses. Google's use of data is governed by Google's privacy policy; our use of data obtained from Google APIs adheres to Google's API Services User Data Policy and Limited Use requirements (see Section 7).
Anthropic PBC — we use Anthropic as the third-party large-language-model provider powering AI features (the "Sage" assistant). Prompts, context, and outputs are processed by Anthropic under an enterprise agreement that contractually prohibits Anthropic from training its models on customer prompts or outputs and that imposes defined retention windows. See Section 6.

5.2 Categorical subprocessors

The following types of third parties also process personal information on our behalf; specific vendors in each category may change from time to time:

Cloud hosting, storage, and compute providers — for operating the Service, storing Owner Data and Employee Personal Data, and backups.
Communications delivery providers — for transactional email and SMS delivery.
Push notification delivery providers — for delivering mobile push notifications.
Error-monitoring and crash-reporting providers — for detecting and diagnosing software defects.
Authentication providers — for sign-in flows where third-party identity is used.
Content-delivery network and edge-computing providers — for delivering the Service to your device efficiently.
Analytics and product-instrumentation providers — for aggregate usage telemetry and product research.

A current list of the specific subprocessors within each category is available on written request at privacy@axiomops.ai. We will respond to reasonable requests within a commercially reasonable timeframe and will update the list on the same channel when a subprocessor is added or replaced. The list is provided in confidence.

5.3 Other disclosures

In addition to subprocessors, we may disclose personal information:

To your employer, for data that flows through features your employer uses (schedules, tasks, write-ups, work-channel messages, etc.), consistent with Section 7 of the Business Terms of Service and Section 7 of the End User Terms of Service.
In response to legal process, when we believe in good faith that disclosure is required by law (subpoenas, court orders, warrants) or is necessary to protect the rights, property, or safety of Axiom Ops LLC, our users, or the public.
In corporate transactions, as described in Section 4.
With your consent, for any purpose we describe at the time we ask.

We do not sell personal information for monetary consideration, and we do not share personal information for cross-context behavioral advertising as those terms are used under California law. See Section 10.

6. AI-Specific Disclosure

When you interact with the Sage AI assistant, the text of your prompt, relevant context (which may include recent operational data, chat context, schedule context, or other data the feature is designed to consider), and the AI's response are transmitted to Anthropic PBC for processing. This allows the model to generate responses.

Under our enterprise agreement with Anthropic PBC:

No training on customer data. Anthropic is contractually prohibited from using our customer prompts or outputs to train or fine-tune its models.
Retention. Prompts and outputs are retained by Anthropic only for the operational and abuse-prevention windows defined in our enterprise agreement and are not retained beyond that window for training or product-improvement purposes.
Advisory-only nature. AI outputs are advisory only. They may be inaccurate, incomplete, or out of date, and should never be relied on as the sole basis for an employment, legal, financial, medical, or safety decision.

You control what goes into AI prompts. Do not submit sensitive personal information (such as social-security numbers, payment-card numbers, health information, or information about minors) to AI features.

We may change our AI provider, the underlying models, or the features that use them. We will update this Policy when we do so.

7. Gmail Limited Use Affirmation

Where the Service uses Google APIs with Gmail scopes (for ingestion of operational reports on the owner side), our use of information received from Google APIs adheres to Google's API Services User Data Policy, including the Limited Use requirements.

Specifically, and by way of affirmation as required by Google:

The Service's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Concretely, this means: we use Gmail data solely to provide user-facing features of the Service (specifically, the parsing of operational reports such as daily sales, payroll, and product mix); we do not transfer Gmail data to others except as necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users; we do not use Gmail data for serving advertisements; we do not allow humans to read Gmail data except (a) with your explicit consent for specific messages, (b) when necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) when the data has been aggregated and de-identified for internal operations, consistent with Google's policy.

You may revoke our access to your Gmail account at any time by visiting https://myaccount.google.com/permissions. Revocation disables the Gmail-ingestion feature; previously-ingested data will be handled under this Policy's retention rules.

8. Retention

We retain personal information only as long as needed for the purposes described in this Policy and to comply with legal, tax, accounting, dispute-resolution, and records-retention obligations. Typical retention windows (subject to backup-rotation and legal requirements):

Account data — for the life of your account and for a reasonable period thereafter to support reactivation, dispute resolution, and backup rotation.
Operational reports (sales, payroll, product mix) — retained for the life of the owner subscription plus a legal-retention margin, to support the owner's reporting obligations.
Team-chat messages in work channels — retained for the duration your employer configures, subject to legal-retention minimums.
Task and checklist records — retained for the duration your employer configures.
Write-ups — retained consistent with your employer's records-retention policy and applicable employment-law retention requirements.
AI interactions — retained consistent with operational and abuse-prevention needs and Anthropic PBC's enterprise-agreement retention windows.
Diagnostic and error data — typically retained for up to 180 days in identifiable form, then aggregated or deleted.
Support and feedback records — typically retained for up to 3 years for service-quality and legal-defense purposes.
User-deleted content — tombstoned and purged from active systems within a reasonable period after deletion, and purged from backups on normal backup-rotation schedules.

When retention is no longer justified, we delete or de-identify personal information. Aggregated and de-identified data may be retained indefinitely for analytics and product-improvement purposes.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, or destruction, including: TLS for data in transit; encryption at rest for Owner Data and sensitive configuration values (including OAuth tokens, where applicable); role-based access controls limiting employee access to production data; monitoring and logging; regular patching of infrastructure; vendor security reviews; and incident-response procedures.

No system is perfectly secure. If we become aware of a confirmed security incident involving unauthorized access to or acquisition of your personal information, we will notify you and affected customers consistent with applicable law. Report suspected incidents to privacy@axiomops.ai.

10. California (CCPA / CPRA) Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), grants you specific rights regarding your personal information. This Section describes those rights and how to exercise them.

Categories of personal information collected and disclosed. In the past twelve months we have collected the categories of personal information described in Section 2 above, from the sources listed in Section 3, for the purposes in Section 4, and disclosed for business purposes to the categories of recipients described in Section 5. Specifically, we have collected identifiers, employment-adjacent information, device and usage information, coarse location (where enabled), content you create, Gmail-ingested content (owner side only), support and feedback content, and biometric-unlock preferences. We have disclosed data in these categories to subprocessors (named and categorical, as described in Section 5.1 and 5.2), to your employer where applicable, and — only when legally compelled — to government authorities.

No sale; no sharing for cross-context behavioral advertising. We do not sell personal information for monetary consideration, and we do not share personal information for cross-context behavioral advertising as those terms are used under the CCPA. We have not sold or shared personal information in the twelve months preceding the effective date of this Policy.

Your rights. Subject to verification and to exceptions under the CCPA:

Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes of use, and the categories of recipients.
Right to delete — request deletion of personal information we have collected from you, subject to CCPA exceptions (e.g., to complete transactions, detect security incidents, comply with legal obligations, or for internal uses reasonably aligned with your expectations).
Right to correct — request correction of inaccurate personal information we maintain about you.
Right to portability — request a copy of your personal information in a portable, readily usable format, where provided by law.
Right to limit use of sensitive personal information — to the extent the CCPA applies to any sensitive personal information we collect, request that we limit its use to purposes permitted without that opt-out.
Right to opt out of sale or sharing — we do neither; no opt-out is required, but you may confirm this at any time.
Right to non-discrimination — we will not deny service, charge different prices, or provide a different level of service in retaliation for your exercise of your CCPA rights.

How to exercise. Submit a request by email to privacy@axiomops.ai, with the subject "CCPA Request," describing the right you wish to exercise and providing information sufficient to reasonably verify your identity. We will respond within the timelines required by the CCPA (typically 45 days, extendable once for an additional 45 days with notice). For right-to-know and right-to-delete requests, we require identity verification using information on file with your account; if we cannot verify your identity, we will decline the request and tell you why.

Authorized agents. You may designate an authorized agent to submit a request on your behalf. We will require (a) proof that you authorized the agent (e.g., a signed authorization), (b) proof of the agent's identity, and (c) direct verification from you, unless you have provided the agent with a power of attorney that meets applicable requirements. Authorized-agent requests should be emailed to privacy@axiomops.ai.

Annual CCPA metrics. If we become subject to the CCPA's annual-metrics obligation, we will publish annual metrics as required. For the prior calendar year, we did not sell or share personal information.

Contact. You may also contact our privacy team at privacy@axiomops.ai for any CCPA-related question. A toll-free phone number for CCPA requests is not currently provided because the Service is primarily a web and mobile application; we will provide one if and when required by law.

11. Other US State Rights (VA, CO, CT, TX, UT, OR, MT, DE, IA, NH, NJ, MN, TN, IN, FL)

If you are a resident of Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Minnesota, Tennessee, Indiana, or Florida, comprehensive state privacy laws in your state grant you specific rights. This Section explains those rights in a combined form. Differences across states are handled by routing all requests through the single request channel below and by applying the more-protective rule where your state requires it.

Rights available (subject to state-law exceptions):

Right to access / confirm. Confirm whether we process your personal information and receive a copy of that information.
Right to correct. Correct inaccurate personal information we maintain about you.
Right to delete. Request deletion of personal information we collected or maintain about you.
Right to data portability. Receive a copy of your personal information in a portable, readily usable format, where provided by the applicable state law.
Right to opt out of sale. We do not sell personal information, but you may confirm this at any time.
Right to opt out of targeted advertising. We do not engage in targeted advertising as defined by the applicable state laws.
Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not use personal information for automated profiling of this kind. AI-assistant outputs are advisory only and are not the sole basis for legally or similarly significantly impactful decisions.
Right to appeal. If we refuse your privacy-rights request, you may appeal the decision by replying to our response email (or writing to privacy@axiomops.ai) within sixty (60) days. We will provide a written response to the appeal within the timelines required by applicable law, explaining our decision and providing contact information for the applicable state attorney general if you remain dissatisfied.

Sensitive-data consent (where required). For categories of personal information your state classifies as "sensitive" and that we do not otherwise need to provide the Service (for example, coarse location we collect only when you enable it), we obtain consent where the applicable state law requires it, and you may withdraw consent at any time.

Children and minors. See Section 12. We do not knowingly process personal information of children under the relevant state's threshold without parental consent.

How to exercise any of these rights. Send a request to privacy@axiomops.ai with the subject line "State Privacy Request," describing the right you wish to exercise, the state you reside in, and information sufficient to reasonably verify your identity. We will respond within the timelines your state law requires (typically 45 days, with a possible extension on notice).

12. Children

The Service is for users aged 16 and older. We do not knowingly collect personal information from anyone under thirteen (13). If you believe we have collected information about a child under 13, contact us at privacy@axiomops.ai and we will delete the information and close the account.

Between ages 13 and 16, use of the Service requires parent or guardian involvement to the extent applicable law requires it, and employer involvement to the extent applicable child-labor law applies to the minor's employment relationship. Axiom Ops LLC relies on the employer's representation that any individual invited as a team member is at least 16 years old and is an actual member of the employer's workforce.

Where applicable state law creates additional protections for minors under 18, we will honor those protections and invite parents or guardians to contact us for assistance at privacy@axiomops.ai.

13. International Transfers

Axiom Ops LLC is headquartered in the United States, and the Service is operated from the United States. Personal information we collect is processed and stored in the United States. If you access the Service from outside the United States, you understand and agree that your information will be transferred to, processed in, and stored in the United States, which may have different data-protection laws than your country of residence. We do not currently target residents of the European Economic Area, the United Kingdom, or other jurisdictions outside the United States, and we do not represent that the Service complies with the GDPR, UK GDPR, or similar non-US frameworks.

14. Do Not Track; Global Privacy Control

Our public websites and the Service do not currently respond to "Do Not Track" browser signals, because there is no industry-standard interpretation of that signal. We do honor the Global Privacy Control ("GPC") as a valid opt-out-of-sale/sharing signal, to the extent applicable law requires; because we do not sell or share personal information, the GPC signal does not change our behavior but we record its receipt as a confirming opt-out on file.

15. Cookies and Similar Technologies

Our public website uses a limited number of first-party cookies and analogous technologies for authentication, security, session management, and aggregate analytics. We do not use third-party advertising cookies on our public site.

The mobile app does not use browser cookies. It uses mobile software development kits (SDKs) for error monitoring (currently provided by our error-monitoring subprocessor) and push-notification delivery (currently provided through Expo / EAS). These SDKs collect device and usage information as described in Section 2 and are governed by this Policy.

Where cookie-consent laws apply to our public website, a consent interface is provided for categories that require consent.

16. Changes to this Policy; Notice; Re-Consent

We may update this Policy from time to time. When we do, we will update the "Last updated" date at the top. If we make a material change — for example, a change in categories of information collected, new categories of subprocessors named, a new legal basis, a reduction in retention protections, or a change that otherwise materially affects your rights — we will notify you in the Service before the change takes effect and, where required, will require you to re-accept the updated Policy before continuing to use the Service. Non-material changes take effect when posted.

17. Contact

Questions, complaints, or requests regarding this Policy or our privacy practices should be directed to:

Email — privacy@axiomops.ai
Postal address — Axiom Ops LLC (postal address available on request to privacy@axiomops.ai)
CCPA / state-privacy requests — privacy@axiomops.ai with the subject line indicating the right you wish to exercise (see Sections 10 and 11)
Gmail / Google-APIs questions — privacy@axiomops.ai
Subprocessor list request — privacy@axiomops.ai

If you are an employee using the Service at work and your question concerns employment matters (pay, schedule, workplace conditions, harassment, accommodation, etc.), please contact your Employer, their HR function, or the appropriate labor agency in your jurisdiction. Axiom Ops LLC cannot resolve employment issues.