1. Who we are.
Infraxus provides fractional CFO services and bookkeeping to owner-run businesses. All of the work is done by the founder, Liam Collier.
Legal entity: Infraxus LLC, a Wyoming limited liability company. Business address: 167 Madison Avenue, Suite 205 #1088, New York, NY 10016.
For anything in this notice, including a privacy request, write to security@infraxus.com. That address reaches the founder directly.
2. What this covers.
This notice covers personal information of clients and prospective clients in the United States: the people who enquire through infraxus.com, who start bookkeeping with us, and who run the businesses we work for.
Personal information means information that identifies, relates to or could reasonably be linked with a particular individual. In this business that is almost always business contact information rather than anything about private life.
It does not cover the bookkeeping ledger itself. Your accounting file is your own record of your business, held in your own QuickBooks Online or Xero account, and it is dealt with in section 5.
3. What we collect and why.
We collect the smallest set of information the work needs, and we collect it from you.
| What | Why we have it |
|---|---|
| Work email address | To answer you, to send the onboarding and access instructions, and to reach you about your subscription. It is also the address we use to verify a privacy request under section 7. |
| Business name | To set you up as a client and to label your subscription and our records of the work. |
| The accounting platform you name at signup, QuickBooks Online or Xero | To know which file the work happens in and which set of access instructions to send you. |
| Revenue band | To place you on the right fixed monthly fee, which is set by turnover. |
| Billing details held by Stripe | To run the subscription. If you add a card, Stripe collects and stores it on its own pages and holds the billing address you give it. Card numbers never reach our website or our systems, and we have no way to retrieve one. |
| Website analytics | To see which pages and which parts of the signup work and which confuse people, so we can fix them. |
How the analytics work
Analytics run through PostHog, behind a first-party proxy on our own domain, so the requests go to infraxus.com rather than to a third-party analytics domain. We record a set of explicit events, such as page views, clicks on a call to action, and the steps of the signup form, and we enable PostHog's autocapture, which records interactions with links, buttons and form controls by the text the element shows rather than by anything you type. The value of every input is stripped before the event leaves your browser.
Session replay runs on the funnel pages, which are the pages that lead to a signup or a booked call. A replay is an anonymous reconstruction of a page session that shows where a form or a price table trips people up. Every form input is masked at capture, so what you type into an email, business name or free-text field is never recorded and never leaves your browser as part of a replay.
You can keep your activity out of analytics entirely: see section 7.
4. What we do not collect.
We never ask for, and never hold, your online-banking credentials. Not a username, not a password, not a one-time code. Nobody at Infraxus needs them and nobody will ever ask you for them. If you are ever sent a message that appears to come from us asking for banking credentials, it did not come from us: tell us at security@infraxus.com.
Your bank data stays in your own accounting file and in your bank's own connection to that file. The bank feed is a link between your bank and your QuickBooks Online or Xero account. It is set up by you, it belongs to you, and it does not pass through Infraxus.
We also do not collect, and have no use for, government identification numbers, health information, precise location, or biometric information.
5. Where the data lives.
These are the services that hold information about you on our behalf, and what each one holds. Each is bound by its own data processing terms.
| Service | What it holds |
|---|---|
| QuickBooks Online or Xero | Your accounting file and everything in it: the ledger, the bank feed, the transactions and the history. The file is yours, not ours. It sits in your own subscription, we work inside it as a user you invited, and it stays with you in full if you leave. |
| Stripe | Your subscription and billing records: the customer and subscription identifiers, the plan, the billing dates, and any card you add, with the billing address given to Stripe. |
| Resend | Transactional email delivery. It handles the messages we send you, such as the welcome, the access instructions and subscription notices, and the delivery records for them. |
| Supabase | A small record of email-only enquiries: the address you gave, what you asked for, and when, so we can follow up and know that we did. |
| Vercel | Website hosting for infraxus.com, and the ordinary request logs a host keeps for security and performance. |
| PostHog | Website analytics and the session replays described in section 3, with every form input masked at capture. |
| Anthropic | AI model provider, United States. Used to tidy the wording of internal work-log entries in our billing tool before they appear on an invoice. Those entries name the client and describe the work done. No hours, rates or fees are sent, and no part of your accounting file, bank data or card data is sent. |
The full sub-processor list, including the services used for fractional CFO work, is on the Security page and in the Privacy Policy.
6. How long we keep it.
- Subscription and billing records: seven years. These are tax and business records and we are required to keep them, so they are outside a deletion request.
- Website analytics: for PostHog's retention period, after which they age out of the analytics system. Session replays are retained for 30 days and then deleted.
- Enquiry records: kept while they are useful for answering you and maintaining ordinary business records, and deleted on request.
- Your accounting file: not ours to keep or to delete. It stays in your own QuickBooks Online or Xero subscription throughout and after.
If you want us gone from your file, the disconnect and deletion page sets out the steps.
7. Your choices and rights.
A growing list of states now give residents rights over their personal information: California, Colorado, Connecticut, Virginia and Utah were early, and others have followed on much the same pattern. Rather than treat people differently by address, we extend the same rights to every client and prospect in the United States, whatever state they are in.
You may ask us to:
- Access: tell you what personal information we hold about you, where it came from, and who it has been disclosed to.
- Correct: fix personal information that is wrong or incomplete.
- Delete: delete what we hold, other than the records section 6 says we are required to keep.
- Port: give you a copy in a portable, machine-readable format.
- Opt out of sale or sharing: see the paragraph below.
We do not sell your information
Infraxus does not sell personal information, and does not share it for cross-context behavioural advertising. We have never done either. There is accordingly nothing to opt out of, but the right is yours regardless and the request route below is open for it.
You can still keep your activity out of our analytics at any time. Set the global "Do Not Track" signal in your browser, use a tracker-blocking extension, or ask us at security@infraxus.com and we will exclude you.
How to make a request
Email security@infraxus.com and say what you want. There is no form and no portal.
Identity is verified by the email address on the account. Send the request from the address we hold for you and that is enough; we will not ask you for identity documents. If you write from another address, we will ask you to confirm from the one on the account, because sending someone else's records to a stranger is the greater risk.
We answer within 45 days of receiving the request. In practice it is usually the same week, because there is one person to ask. If a request is genuinely complex we may need longer, and if so we will tell you within the 45 days why, and when to expect the answer.
You will not be charged for a request, and we will not treat you differently for making one.
An authorised agent may make a request for you. We will ask for written proof that you gave them permission, and we may still confirm with you directly from the address on the account.
If we refuse a request, we will tell you why. You may reply to that decision at the same address and ask us to look again.
7a. Text messages.
If you call one of the Infraxus United States numbers and press 1 in the voicemail menu, we send one text message to the number you called from, with a link to book a time with Liam. Your keypress is your consent, and it is recorded against that call. We send nothing else by text: no marketing, no sequences.
Message and data rates may apply. Reply STOP at any time to opt out and HELP for help. Mobile numbers and text message consent are not shared with third parties or affiliates for marketing or promotional purposes.
8. Children.
Infraxus is a service for businesses. It is not directed to anyone under 16, we do not market to anyone under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to security@infraxus.com and we will delete it.
9. Changes to this notice.
Last updated 30 September 2026.
This notice will be updated when what we do changes, and the date above will change with it. Where a change materially affects how we handle personal information, active clients are told by email rather than left to notice the new date.
10. Contact.
For any privacy question or request:
Firm
Infraxus
Entity
Infraxus LLC
A Wyoming limited liability company
Address
167 Madison Avenue, Suite 205 #1088, New York, NY 10016
Related pages: the full Privacy Policy, the Security page, the Terms of use, and how to disconnect and delete your data.