Skip to content

Privacy Policy

  1. 1.Who we are

    This policy explains how TNT Business LLC d/b/a Niktrix, Miami, Florida ("Niktrix", "we") handles personal information on niktrix.org, on our kiosks, on the Orders screen, in the owner’s app and through our review stands.

  2. 2.What we collect

    Contact and early-access forms. When you write to us at /contact, /pos or /solutions: your name, your business name, phone number, email, your message, which product you asked about, and on /solutions which solutions interest you and whether you have a kiosk or POS (register) now. We keep it in our database and send it to ourselves by email.

    Orders placed on a kiosk. The items and options chosen, any note typed on an item, the totals, the time and how the order was paid. We do not ask guests for their name, phone number or email.

    Venue staff. Each staff member’s name, role and, if the venue adds it, a phone number. PINs are stored only as a one-way hash. If someone enters wrong PINs, we keep a salted one-way hash of the device’s IP address and a count of the attempts, to lock the screen for a while. We never store that address itself.

    Venue settings and menus. What a venue enters in the owner’s app: its business details, menu, prices, hours, logo and colours.

    Menu photos. Photos or PDFs a venue uploads to draft its menu are stored in Vercel Blob and deleted after 30 days. They are sent to Anthropic, which reads them to make the draft. The draft becomes part of the venue’s menu.

    Review stand scans. When someone taps or scans a review stand: the time, the stand, whether it was tapped or scanned, the browser’s user agent and a salted one-way hash of the IP address. For our older links (including the QR code on our business card) we keep the time, the user agent, the page the visit came from, and whether it was tapped or scanned — no IP address.

    Analytics. Vercel Web Analytics counts page views and clicks on our contact links. It uses no cookies and does not identify you.

    Card payments. We never receive or store card numbers. Card payments are handled by Stripe (Stripe’s Privacy Policy). We keep Stripe’s reference for each payment, the amount and the fees.

  3. 3.Cookies

    We set three cookies, all needed for the site and our apps to work. None is used for advertising or tracking.

    • lang — remembers the language you chose. Kept for 1 year.
    • admin_session — keeps our own team signed in to the admin. Kept for 7 days.
    • staff_session — keeps a venue’s staff signed in to the Orders screen. Kept for 12 hours.

  4. 4.How we use it

    To answer you, to provide and support our services, to run the kiosks and the Orders screen, to keep accounts secure, and to count review stand taps for the venue. We do not use it for advertising.

  5. 5.Who we share it with

    Only with the companies that run parts of our service for us, and only what each needs:

    • Vercel — hosts the site and apps, analytics, and storage for menu photos.
    • Neon — our database.
    • Resend — sends us the messages from our forms by email.
    • Anthropic — reads menu photos to draft a menu.
    • Stripe — card payments and venues’ Stripe accounts, when card payments are enabled.
    • Google — only in our own admin: we search Google’s business listings to find a venue when we set up its review stand. No visitor or guest information is sent.

    A venue sees the orders placed at its own counter and the tap counts of its own stands. We may also share information if the law requires it.

    We do not sell personal information.

  6. 6.How long we keep it

    • Menu photos: 30 days, then deleted.
    • Cookies: as listed above.
    • Messages from the /contact, /pos and /solutions forms: 24 months.
    • Orders: while the venue’s account is active, and 3 years after it closes (for the venue’s accounting).
    • Staff details: while the staff member is active; deleted within 90 days after the staff member is removed or the venue’s account closes.
    • Review stand scan records: 24 months.

  7. 7.Deleting your information

    Write to hello@niktrix.org and tell us what you would like deleted. We reply within 30 days. If you ordered at a venue, the order belongs to that venue’s records; we can help the venue with your request.

  8. 8.Children

    Our site and services are not meant for children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information, write to us and we will delete it.

  9. 9.Security

    We use encrypted connections, store PINs and IP addresses only as one-way hashes, and limit who on our team can see your information. No system is perfectly secure, but we work to protect it.

  10. 10.Changes and contact

    We may update this policy and will post the new version here with a new date. Questions: TNT Business LLC d/b/a Niktrix, Miami, Florida, hello@niktrix.org, (518) 870‑0354.

Let’s find what’s costing you money.

Book a 10-minute visitWhatsApp us