Infraxeon LLC
Effective Date: April 2026
Last Updated: August 2026
1. Introduction
Infraxeon LLC (“Infraxeon,” “we,” “us,” or “our”) operates the Perktiva employee rewards and gift card platform, the Forcelynx workforce and operations platform, and related services (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Services.
By using our Services, you agree to the collection and use of information in accordance with this policy.
2. Who We Are
Legal Entity: Infraxeon LLC
State of Formation: New York
Contact: hello@infraxeon.com
Website: https://infraxeon.com
Products: Perktiva (perktiva.com) and Forcelynx (forcelynx.com)
3. Information We Collect
3.1 Information from Restaurant Clients (Organizations)
When a restaurant or hospitality business subscribes to our Services, we collect:
- Business name, address, and contact information
- Billing information (processed securely by Stripe; we do not store card numbers)
- Administrator account credentials (name, email, password hash)
- Location and operational data
3.2 Information About Employees
Restaurant employees enrolled in our platforms may have the following information collected on their behalf by their employer:
Across both products:
- First and last name
- Employee code / badge number
- Email address (optional)
- Phone number (optional)
- Role and home location
- PIN (stored as a secure hash, never in plain text)
Perktiva (rewards and gift cards):
- Wallet balance and transaction history
Forcelynx (workforce and operations):
- Schedules, shifts, and availability
- Hours worked and tip allocations
- Training progress, certifications, and quiz results
- Task, checklist, and operational activity records
- Workforce performance metrics
3.3 Information About Restaurant Guests (Forcelynx)
Where a restaurant Client uses Forcelynx reservation and guest modules, we process guest information on the Client’s behalf:
- Reservation details (name, contact information, party size, date and time)
- Seating, dietary, and occasion preferences, and service notes entered by the Client’s staff
- Visit history within the Client’s locations
The restaurant Client controls this data and is responsible for its lawful collection. We do not collect guest payment card data, and we do not use guest data for advertising or sell it to anyone.
3.4 Information from Gift Card Recipients (Perktiva)
When someone receives or purchases a gift card through Perktiva:
- Recipient name
- Email address (for email delivery)
- Phone number (for SMS delivery)
- Personal message (if provided by purchaser)
- Gift card balance and transaction history
3.5 Information from Gift Card Purchasers (Perktiva)
- Name and email address
- Payment information (processed by Stripe; we receive confirmation only, not card details)
3.6 Information from Loyalty Program Members (Perktiva)
Where a restaurant Client runs a Perktiva loyalty or stamp program, guests who enroll may provide:
- Name and contact information (phone number or email) used for enrollment and wallet pass delivery
- Stamp, visit, and reward activity within the Client’s program
- Wallet pass identifiers (Apple or Google Wallet)
The restaurant Client controls this data and is responsible for its lawful collection. We do not use loyalty data for advertising and we do not sell it.
3.7 Point-of-Sale Data
With the Client’s authorization, our Services integrate with the Client’s point-of-sale systems (such as Oracle Simphony, Toast, and Square) and process transaction and check-level data for reward redemption, gift card redemption, fraud detection, and labor and operations analytics. We do not process cardholder data from these integrations.
3.8 Automatically Collected Information
- IP address and device information
- Browser type and version
- Pages visited and time spent
- Error logs and performance data
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Perktiva and Forcelynx platforms
- Process gift card purchases and deliver gift cards via email or SMS
- Send reward notifications and wallet balance updates to employees
- Operate scheduling, tip distribution, training, and operations modules on the Client’s behalf
- Support reservation and guest service features configured by the Client
- Operate guest loyalty and stamp programs configured by the Client
- Process payments through Stripe
- Communicate with restaurant Clients about their accounts
- Improve and develop our Services
- Comply with legal obligations
- Prevent fraud and ensure platform security
5. SMS Communications
By providing a phone number and selecting SMS as a delivery method, you consent to receive text messages from our Services on behalf of the restaurant organization.
Types of SMS messages we send:
- Gift card delivery notifications
- Gift card balance updates
- Reward issuance notifications
- Wallet balance confirmations
Opt-out: Reply STOP to any message to unsubscribe from SMS communications. You will receive a confirmation message and no further messages will be sent.
Help: Reply HELP for assistance or contact us at hello@infraxeon.com.
Message frequency: Message frequency varies based on account activity. Messages are transactional and sent only when triggered by a relevant event.
Message and data rates: Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
6. How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances:
6.1 Service Providers
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing and billing | stripe.com/privacy |
| Twilio | SMS delivery | twilio.com/legal/privacy |
| SendGrid (Twilio) | Email delivery | twilio.com/legal/privacy |
| Cloudflare | CDN, DNS, security, R2 storage | cloudflare.com/privacypolicy |
| Render | Cloud hosting infrastructure (application, database, cache) | render.com/privacy |
| Amazon Web Services | Cloud hosting infrastructure | aws.amazon.com/privacy |
| Google Wallet passes. Receives the pass holder’s name, balance, employee code and location | policies.google.com/privacy | |
| Apple | Apple Wallet pass updates. Receives device push tokens, not pass contents | apple.com/legal/privacy |
| Sentry | Application error monitoring and diagnostics | sentry.io/privacy |
| GitHub | Runs our encrypted backup jobs | docs.github.com/privacy |
6.2 Payroll Providers (at the Client’s direction)
Where a Client connects a payroll or HRIS provider (such as Paycom or ADP), hours and tip data export one way, read only, to that provider at the Client’s direction. Payroll processing occurs at the provider, under the provider’s terms; we do not receive or store payroll outputs, tax data, or bank details.
6.3 Restaurant Clients
Employee and guest data is shared with and controlled by the restaurant organization that enrolled the employee or collected the guest information. Employees and guests should contact the restaurant regarding how it uses this data.
6.4 Legal Requirements
We may disclose information if required by law, court order, or government authority.
6.5 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
7. Data Retention
We retain personal information for as long as necessary to provide our Services and comply with legal obligations:
- Employee data: Retained while the restaurant organization is an active client. Deleted within 90 days of account termination upon request.
- Guest data: Retained per the Client’s configuration and deleted or anonymized on the Client’s instruction, and in any case upon account termination as described above.
- Loyalty program data: Retained per the Client’s program configuration; deleted on the Client’s instruction or upon account termination.
- Gift card and financial records: Retained for 7 years for financial record-keeping purposes.
- Audit logs: Retained for the life of the account. Audit records are not deleted on a schedule; they are removed only when an organization’s data is deleted in full. Backup copies are retained for up to 7 years as described below.
- SMS opt-out records: Retained indefinitely to honor opt-out requests.
- Backup copies: Encrypted backups are retained on a fixed cycle independent of the periods above: operational backups for 8 weeks, and compliance backups of audit and financial records for 7 years. When we delete personal information from our live systems, backup copies are not individually altered; they are destroyed when their retention cycle expires. Backups are encrypted at rest and are restored only for disaster recovery or integrity testing.
8. Data Security
We implement industry-standard security measures to protect your information:
- All data transmitted over HTTPS/TLS encryption
- Passwords and PINs stored as bcrypt hashes (never in plain text)
- Row-level security enforcing per-tenant isolation
- API authentication via signed JWT tokens (HS256)
- Access controls and role-based permissions
- Regular security monitoring and logging
Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a portable format
- Opt-out of SMS: Reply STOP to any message or contact us at hello@infraxeon.com
To exercise these rights, contact us at hello@infraxeon.com. We will respond within 30 days.
Note for employees: Employee data is primarily controlled by the restaurant organization (your employer). Requests related to employment records should be directed to your employer first.
Note for guests: Reservation and preference data is controlled by the restaurant you visited. Please direct requests to the restaurant first; we support our Clients in fulfilling them.
10. Children’s Privacy
Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at hello@infraxeon.com.
11. International Data Transfers
Our Services are operated in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using our Services, you consent to this transfer.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to opt out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your rights
To exercise your California privacy rights, contact us at hello@infraxeon.com.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last Updated” date at the top of this page indicates when the policy was last revised. Continued use of our Services after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Infraxeon LLC
Email: hello@infraxeon.com
Website: https://infraxeon.com
New York, United States
This Privacy Policy is provided for informational purposes. For legal advice specific to your situation, consult a qualified attorney.