Privacy Policy

Who we are

AXR is a product of Emerge Labs LLC (“Emerge Labs”, “we”, “us”). AXR lets people book and order from local shops inside AI assistants such as ChatGPT, Claude, Gemini, Grok and Meta AI, and gives shops a web app at app.getaxr.com to run it. This policy explains what we collect, why, who we share it with, how long we keep it and the choices you have.

Who this policy covers

• Shop owners and their staff who use the AXR web app at app.getaxr.com.
• Customers who book an appointment or place an order with a shop through AXR inside an AI assistant.
• Visitors to getaxr.com, including the places directory.

When you book or order, the shop you choose also receives your details and handles them under its own privacy policy. The AI assistant you use handles your conversation under its own privacy policy.

What we collect

From customers who book or order through an AI assistant:

• Your name, phone number and email. All three are required to book or order.
• Booking and order details: the shop and location, the service or items, date and time, preferences you mention (for example “oat milk”), price and status (paid, ready, rescheduled, cancelled).
• An anonymous user id that some assistants send with each request (ChatGPT sends one per user). We use it only to pre-fill details, never as proof of who you are.
• What you asked AXR to look up, for example “haircut in the Mission”.

From shop owners and staff:

• Account details: your name, email, the businesses, shops and locations you manage, and your role.
• Shop details: name, logo, hours, menu, services, prices, your answers to customer questions and your settings.
• Your point-of-sale connection (Square, or Clover if you use it). When you connect, we receive an access token that lets AXR read your locations and catalog and create bookings and orders. We encrypt it with a dedicated key in Google Cloud; AXR support staff can't see it.
• Sales information from your point of sale, with your permission, to show you insights for each location.
• Billing details: your plan and monthly statements. When card billing is enabled, your card itself is held by our payment processor.

From everyone:

• Logs: technical records of requests to our servers (time, page or tool used, IP address, browser or assistant, errors). We use them to keep AXR running and secure.
• What you send us, for example through the sign-up form or by email.
• One small setting saved in your own browser: which AI assistant you last picked on a place page. getaxr.com has no advertising cookies and no third-party analytics.

The places directory shows public business details (name, address, phone, website, hours) from open data: Overture Maps Foundation, OpenStreetMap contributors and DataSF. If you own a listed business and want a detail changed or removed, email hi@getaxr.com.

Payments

Customers pay for orders on a payment page that hands the card straight to the shop's payment system (Square, or Clover if the shop uses it). The money goes to the shop's own account. AXR never receives or stores your card number.

When card billing for shops is enabled, shops will pay AXR's software fee by card through Stripe. Stripe will hold the card; we'll keep only what Stripe tells us, such as the card brand, the last 4 digits and the expiry date.

What we don't do

• We don't record or store audio. AXR doesn't make or answer phone calls.
• We don't sell personal information, and we don't share it for targeted advertising.
• We don't show ads.
• We don't store card numbers.
• One shop never sees another shop's customers.

How we use information

• To make the booking or order you asked for, send it to the shop and show you its status.
• To let you check, reschedule or cancel a booking. We confirm it's you first with a code or link sent to your email. AXR doesn't send text messages.
• To run a shop's account: its listing in assistants, menu and hours, orders and bookings, insights and statements.
• To bill the software fee.
• To give support, fix problems and keep AXR secure, including preventing fraud and abuse.
• To send service messages, such as confirmations, sign-in links, statements and notice of changes. We don't send marketing to customers.
• To meet our legal obligations.

Usage counts (for example, how often a shop appeared in an answer) never include customers' names, phone numbers or emails.

Who we share it with

• The shop you book or order with: your name, contact details and the booking or order, so it can serve you. Inside the shop, staff with the Viewer role see your first name only.
• The shop's point of sale (Square, or Clover if the shop uses it): to check availability, create the booking or order in the shop's own account and take payment.
• AI assistants (ChatGPT, Claude, Gemini, Grok, Meta AI): AXR answers inside the assistant you use. The assistant receives what AXR returns for your request, such as places, open times, prices and the details of your booking or order, and shows it in your conversation. What the assistant does with your conversation is covered by its own privacy policy.
• Companies that run parts of AXR for us: Google Cloud (hosting, database, encryption keys and logs), Resend (email, including verification codes), Mapbox (maps; your browser loads map images from Mapbox) and Forward Email (forwards mail sent to hi@getaxr.com). Vercel hosts our domain's DNS records and receives no personal information. Stripe will handle shop billing once it's enabled. These companies may use the data only to provide their service to us.
• Authorities or others when the law requires it, or to protect someone's safety or our rights.
• A buyer or successor if Emerge Labs or AXR is sold or merged; this policy would keep applying to your information.

Help from AXR support

To help a shop, AXR support staff may view the shop's account as the owner or a team member sees it. They must give a reason first, each visit lasts at most 60 minutes, and it is read-only unless a change is needed to fix the problem the shop raised. Support can never see or change a payment card, billing, store connection credentials or sign-in links, and can't transfer ownership, close a business or delete a shop. Every visit, its reason and any change made are recorded, and the business owner sees each visit under Account → Activity.

How long we keep it

We keep information only as long as we need it. Today that means:

• Customer contact details and bookings and orders: while the shop's account is open, or until you ask us to delete your details.
• Billing records: as long as tax and accounting law requires.
• Verification codes: they expire within minutes and are deleted within a day.
• Sessions that let you check your bookings without an account: up to 30 days.
• Owner sign-in links: they expire within minutes and are deleted within a day. Sign-in sessions: deleted up to 30 days after they end.
• Records of requests made to AXR (which tool, which place, the outcome): up to 13 months.
• Raw usage events: up to 13 months. Daily totals per location, which hold no personal details, are kept longer.
• Messages from Square or Clover about orders and bookings: emptied after 30 days, deleted after 90 days.
• Records of support visits: up to 2 years.
• Square or Clover connection tokens: until the shop disconnects or closes its account. Disconnecting revokes them and deletes them.
• Server logs: up to 30 days. Backups: up to 30 days.

Security

We use encryption in transit (HTTPS) and at rest, a separate encryption key for Square tokens, database rules that stop one business from reading another's data, limited staff access with every visit logged, and sign-in by email link instead of passwords. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

Your choices

Wherever you live, you can ask us to tell you what personal information we have about you, give you a copy, correct it or delete it. Email hi@getaxr.com; the request process is described below.

US state privacy rights, including California

If you live in California (CCPA, as amended by the CPRA) or another US state with a privacy law, such as Colorado, Connecticut, Virginia, Utah, Texas or Oregon, you have the right to know what personal information we collect, use and disclose; to get a copy in a portable format; to correct it; to delete it; and to opt out of its sale, its sharing for targeted advertising and profiling. We don't sell or share personal information as those laws define it, and we don't use sensitive personal information to infer things about you. We won't treat you differently for using these rights.

In the last 12 months we collected these categories: identifiers (name, phone, email, assistant user id, IP address); commercial information (bookings, orders, purchases at a shop); internet activity (logs and searches sent to AXR); approximate location from IP address; and, for shop owners and staff, professional information (your business and role). We collect them from you, from the AI assistant you use, from the shop's point of sale (with the shop's permission) and from open data, for the purposes and with the recipients described above.

How to make a request:

• Email hi@getaxr.com with the subject “Privacy request” and tell us what you'd like.
• We confirm we got it within 10 business days and answer within 45 days. If we need more time, we'll tell you why and take up to 45 more days.
• To protect you, we verify the request, usually with a code or link sent to the email you used with AXR.
• Someone you authorize can make the request for you with your signed permission.
• If we turn a request down, you can appeal by replying to our answer. We'll respond within 45 days; if you're still unhappy, you can contact your state attorney general.

If your request is about a shop's own records (for example, its own customer list in Square), we'll pass it to the shop, which decides as its own business.

Children

AXR is meant for adults. We don't knowingly collect information from children under 13, and we don't sell or share anyone's information, including people under 16. If you think a child has given us information, email hi@getaxr.com and we'll delete it.

International users

AXR is run from the United States and serves shops in the United States, starting with the San Francisco Bay Area. If you use AXR from another country, your information is processed and stored in the United States, where privacy laws may differ from yours.

Changes to this policy

We'll post changes here and update the date at the top. If a change materially affects information we already have, we'll tell shop owners by email before it takes effect and, where the law requires, ask for consent.

Contact

Emerge Labs LLC. Email: hi@getaxr.com.