Privacy Policy

Last updated: November 3, 2026

AxleTap LLC, a Florida limited liability company (“AxleTap”, “we”, “us”), makes point-of-sale and bookkeeping software for parts counters. This policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. It covers:

• axletap.com, our website;
• the AxleTap application at <store>.axletap.com and app.axletap.com, including the mobile app;
• emails, text messages and support we send or provide.

If you are a customer of a store that uses AxleTap (for example, you bought parts at a counter), the store is responsible for how it uses your information, and the store’s own privacy notice applies. We process that information on the store’s behalf, as described in section 3.

1. Information we collect

From visitors to axletap.com. When you request a demo: your name, company, email, phone, the number of stores and registers, and anything you write in the form. Our website host handles technical data such as IP addresses to deliver and protect the site. We use privacy-preserving site analytics that count visits without cookies. The website does not set cookies. The application uses cookies only to keep you signed in and to protect forms; it has no advertising or tracking cookies.

From store owners and staff who use the application.

• Account information: name, email, phone, role, employee PIN or badge (stored hashed), two-step sign-in settings, and the business’s legal name, address, tax ids and bank details (last four digits only) needed for billing.
• Usage and device information: sign-in times, IP address, browser or device, pages and actions, and error reports. The audit log records who changed what, which is a feature of the product.
• Billing information: plan, invoices, and payment records. Card numbers for your subscription are handled by our payment processor; we store only the card’s last four digits and expiry.
• Electronic signatures: when you sign an agreement in the application we record the signature image, the fields you filled in, and a signing record with time, IP address, device and approximate location, so the signed document can be verified later.

On behalf of stores (the store’s customer data).

• Store customers: names, contact details, charge-account balances, tax-exempt certificates, vehicle and fleet records, purchase history, and signatures captured on delivery or at the terminal.
• Store employees: the staff accounts above, time clock and sales performance.
• Vendors and inventory: suppliers, parts, prices, purchase orders and documents uploaded to the application, such as vendor invoices and packing slips.
• Payments: card payments at the counter are processed by the store’s card processor. Card numbers never reach AxleTap; we receive a token, the card brand, last four digits and the authorization result.
• Bank account data through Plaid (section 4).
• Text messages: phone numbers and the content of messages the store sends through AxleTap (receipts, statements, pay links, pickup notices) and replies, including STOP and HELP keywords.

2. How we use information

• To provide, operate and support the service, including backups and restoring data.
• To bill subscriptions and usage.
• To send service messages: invoices, security alerts, renewal and payment reminders, and product changes that affect you.
• To keep the service secure: detecting fraud, abuse and unauthorized access.
• To improve the product using de-identified, aggregated usage statistics (for example, which features are used and how often). These statistics never identify a store, a person or a transaction.
• To respond to demo requests and sales enquiries.
• To comply with law, tax and accounting rules, and to enforce our agreements.

We do not sell personal information, and we do not use it for advertising. We do not share store data with other stores, except where two stores under common ownership have linked their accounts on purpose.

3. Our role for store data

For information a store enters or that its customers give it, the store is the controller (the business that decides why and how it is used) and AxleTap is its processor. We use it only to provide the service under the store’s instructions, which are set out in the Customer Agreement and, where privacy law requires one, the Data Processing Addendum. Requests from a store’s customer about their information should go to the store; we help the store respond.

4. Bank account data (Plaid)

When a store connects a bank account for bank feeds or for a bank payment, the connection goes through Plaid Inc. By connecting, the person authorizing the connection confirms they are allowed to grant access to the store’s accounts, and agrees to Plaid’s End User Privacy Policy at https://plaid.com/legal/#end-user-privacy-policy.

What happens:

• What we receive: transactions and balances for the accounts the store chooses, the institution’s name, and the last four digits of each account number. We never receive the bank password, and we cannot move money. Full account numbers are not stored.
• How we use it: only to bring bank lines into the store’s books for matching and reconciliation, and to suggest categories for them. Bank data is never used for advertising, never sold, and never shared with another store or any third party except our hosting providers that store it for us.
• How long we keep it: the raw data behind each bank line is deleted 13 months after it is received. The bank lines themselves remain as part of the store’s accounting records, which the store controls. The access key Plaid gives us is stored encrypted and is deleted when the store disconnects the bank.
• Disconnecting and deletion: a store can disconnect a bank at any time from Books → Bank Feeds → Disconnect. Disconnecting revokes our access at Plaid and deletes the access key. To have the remaining raw bank data deleted sooner than 13 months, email privacy@axletap.com from the owner’s account; we complete deletion within 30 days and confirm by email. You can also manage or delete the data Plaid itself holds at https://my.plaid.com.

Paying a store by bank transfer. When you pay a store’s invoice from your bank on its payment page, Plaid verifies your account and passes its numbers to the store’s payment processor for that one debit. We keep the bank’s name and the last four digits with the payment record, and nothing else; the connection is closed as soon as the account is verified.

Paying AxleTap by bank transfer. If you choose to pay your AxleTap subscription by bank debit, you either type the account and routing numbers, which our payment processor checks with the bank, or connect the account through Plaid. The numbers go straight to our payment processor, which debits the account under the authorization you accept, and you receive a copy of that authorization by email. We store only the bank’s name and the account’s last four digits; the full numbers are held by the processor under its own terms. Changing your payment method stops further debits.

5. Card payments

Card payments at the counter and online pay links are processed by the store’s card processor under the store’s agreement with it. Card numbers are entered into the processor’s secure form or terminal and never pass through AxleTap’s servers. We store the token the processor returns, the card brand, the last four digits, and the result of the transaction.

6. Text messages

Stores send text messages through AxleTap using a carrier connection provider. We send messages only to numbers the store’s customers gave the store, for the purposes in the SMS Program Terms at https://axletap.com/sms/. Phone numbers and consent records are never shared with third parties for marketing. Replying STOP to any message stops further messages from that store; replying HELP returns contact information. Message and data rates may apply.

7. AI features

Some features use artificial-intelligence models to read vendor documents, suggest departments and bank categories, and answer questions from reports and help articles. The documents and text involved are sent to an AI model provider under business terms that prohibit the provider from training models on that data and that limit retention to what is needed to process the request. AxleTap does not train models on customer data. AI output is a suggestion; a person at the store approves it before anything is posted.

8. Who we share information with

We share information only with service providers that process it for us, under contracts that limit their use to our instructions:

Provider	Purpose	Location
Cloud hosting provider	Hosting, database, backups, file storage	United States
Website host and network protection	Website delivery, DNS, cookie-free analytics	United States
Email delivery provider	Sending and receiving email	United States
Plaid Inc.	Bank account connections and verification	United States
The store’s card processor	Card and ACH payments, under the store’s own agreement	United States
Carrier connection provider	Text message delivery	United States
AI model providers	AI features, where a store turns them on	United States
Error reporting provider	Technical error reports (no card or bank data)	United States
Intuit	QuickBooks Online or Desktop sync, where a store turns it on, under the store’s Intuit account	United States

We name only the providers whose own terms you accept directly (Plaid, Intuit). A list of the others is available on request to privacy@axletap.com.

We also disclose information when the law requires it, to protect the rights and safety of AxleTap, our customers or others, and in a merger or sale of the business, in which case this policy continues to apply.

9. How long we keep information

• Store data: for as long as the store’s subscription is active. After cancellation the store has 90 days to export its data, after which it is deleted from live systems and then from backups within a further 35 days. Accounting records that the law requires us to keep (invoices we issued, tax records, signed agreements) are kept for the period the law requires.
• Raw bank data: 13 months (section 4).
• Demo requests: as long as we need them to follow up.
• Logs and audit trail: security logs for 12 months; the store’s audit log for the life of the account, as part of the store’s records.

10. Security

We protect information with encryption in transit (TLS) and at rest, database-level isolation so that one store can never read another’s data, two-step sign-in for back-office access, least-privilege access for our staff, and daily backups with point-in-time recovery. Card numbers and bank passwords never reach our systems. We will notify the account owner without undue delay, and within 72 hours of confirming a security breach affecting their data. A description of our practices is at https://axletap.com/security/.

11. Your choices and rights

• Access, correction, export: store owners can see and change their account information in Settings and can export the store’s data at any time from Settings → Your agreement. Website visitors can email us.
• Deletion: email privacy@axletap.com. For store data, the request must come from the account owner, and we delete it as described in section 9. For bank data, see section 4.
• Marketing: we do not send marketing email to application users beyond product notices. Demo-request follow-ups stop when you ask.
• State privacy laws: residents of states with consumer privacy laws (such as California) may have rights to know, delete, correct and opt out of sale or sharing. We do not sell or share personal information for advertising. To exercise a right, email us; we verify the request and respond within the time the law allows. We do not discriminate against anyone for exercising a right.
• Children: the service is for businesses and is not directed at children under 16. We do not knowingly collect their information.

12. Changes

When we change this policy we update the date above, keep earlier versions, which we send on request to privacy@axletap.com, and email store owners at least 30 days before a change that reduces their rights.

13. Contact

AxleTap LLC 7901 4th St N, STE 300, St. Petersburg, FL 33702 Privacy requests: privacy@axletap.com Support: support@axletap.com