Privacy Policy

1. Who we are

Jordi is a peer-to-peer car rental marketplace operated by Winixx Inc. ("Winixx," "we," "us," or "our"), a company incorporated in the United States. Our registered address is available upon request at support@jordi.winixx.net.

When you use Jordi — whether as a renter, a host, or a visitor — this Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have.

2. Information we collect

Account information: When you register, we collect your name, email address, phone number, and password. Hosts additionally provide a physical address and banking information for payouts.

Identity verification: We use Stripe Identity to verify government-issued photo ID. Stripe processes and stores identity documents; we receive only a verification status (verified / failed). We do not store copies of your ID.

Vehicle information: Hosts provide vehicle details, photos, registration documents, and insurance certificates when listing a vehicle.

Booking and transaction data: We collect dates, pricing, booking status, messages between hosts and renters, and transaction records for every booking. This includes records of cancellations, applicable cancellation penalties, trip extension requests and fees, and any proportional refunds issued to wallet or card.

Trip photos: During pickup and drop-off inspections, renters capture live photos of the vehicle. These are stored securely and automatically deleted 30 days after the rental ends.

Mobile / SMS information: If you provide a mobile phone number and opt in to receive text messages, we collect your phone number, the categories of messages you've consented to, the date and method of your opt-in, and your opt-out status if you later reply STOP. See Section 11 for details on how this information is used and protected.

Location data: With your permission, we access your device's GPS to:

• Show vehicles near your current location on the browse page
• Track your location during an active trip so the host can see the vehicle's general area
• Verify you are within the required distance of the drop-off address before completing a return

Location tracking during a trip stops immediately when the rental is marked complete or cancelled. We do not share your precise location with anyone other than the host of your active rental.

Device and usage data: We automatically collect IP address, browser type, device identifiers, pages visited, and feature usage for security monitoring and product improvement.

Communications: Messages sent through the Jordi messaging system are stored and may be reviewed by our support team to resolve disputes.

3. How we use your information

• To create and manage your account
• To facilitate bookings, payments, and payouts between renters and hosts
• To process cancellations, calculate applicable penalties, and issue refunds proportionally across wallet balances and payment cards via Stripe
• To process trip extension requests, charge additional fees, and notify hosts of changes to return timelines
• To verify identities and prevent fraud
• To enforce our Terms of Service, including our cancellation policy, geofence return policy, and late return penalty rules
• To send you booking confirmations, receipts, cancellation outcomes, and service communications by email or, where you've opted in, by SMS text message
• To respond to your support requests and resolve disputes
• To improve the Jordi platform through aggregate, anonymized analytics
• To comply with legal obligations, including tax reporting

We do not use your data for advertising. Jordi products are ad-free.

4. How we share your information

With your booking counterpart: When a booking is confirmed, renters and hosts receive each other's first name, last initial, and phone number. Full names and contact details are not shared before confirmation.

With Stripe: Payment processing, identity verification, host payouts, cancellation refunds, and extension fee charges are all handled by Stripe, Inc. When a cancellation triggers a partial or full refund, or when a trip extension results in an additional charge, Stripe processes that transaction on our behalf. Stripe acts as a data processor under its own privacy policy.

With HERE Technologies: We use HERE's mapping and reverse-geocoding APIs to display location data. GPS coordinates are transmitted to HERE only to resolve a human-readable city/neighborhood label.

With our SMS delivery provider: If you opt in to text messages, your phone number and the content of messages sent to you are shared with a third-party SMS delivery platform solely to transmit those messages. This provider does not use your number for its own marketing purposes and is contractually restricted to message delivery on our behalf.

With Winixx group companies: Jordi is part of the Winixx platform family. Your account is shared with other Winixx products you have authorized. We do not share your data with Winixx for unrelated commercial purposes.

For legal compliance: We may disclose information if required by law, subpoena, or government request, or to protect the rights, property, or safety of Winixx, our users, or the public.

We do not sell your personal data. We have never sold personal data and have no plans to do so.

Mobile information is never shared for third-party marketing. No mobile phone number, SMS opt-in status, or text messaging consent data is shared or sold to any third party or Winixx affiliate for their own marketing or promotional purposes. This category of information is shared only as described above, solely for the purpose of delivering the messages you've requested.

5. Data retention

• Trip photos: Deleted 30 days after rental completion
• Location data: Purged when the trip ends
• Account data: Retained while your account is active and for 3 years after deletion, as required for financial and dispute records
• Transaction records (including cancellation penalties, extension fees, and refund records): Retained for 7 years for tax and legal compliance
• Messages: Retained for 2 years, then archived or deleted
• SMS opt-in/opt-out records: Retained for the life of your account plus 4 years, to demonstrate compliance with consent and opt-out requests

6. Security

We use industry-standard security practices including TLS encryption in transit, AES-256 encryption at rest for sensitive fields, access controls limiting who on our team can view personal data, and regular security reviews. No system is perfectly secure. If you discover a vulnerability, please report it to security@winixx.net.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data (subject to retention requirements above)
• Port your data to another service
• Object to certain processing activities
• Opt out of the sale of personal data (we do not sell data, but you may submit a request under CCPA at the link below)

To exercise any of these rights, email support@jordi.winixx.net or use our Do Not Sell My Information form. We will respond within 30 days.

8. Cookies and tracking

Jordi uses session cookies for authentication. We do not use third-party advertising cookies or cross-site tracking pixels. If you disable cookies, you will not be able to stay logged in.

9. Children's privacy

Jordi is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us at support@jordi.winixx.net and we will delete it promptly.

10. California residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act. You have the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale of personal information. As noted above, we do not sell personal information. To submit a CCPA request, use our Do Not Sell My Information page or email support@jordi.winixx.net.

11. SMS communication

This section describes how we handle information related to our optional SMS text messaging program.

Consent: We collect and use your mobile phone number for SMS communication only after you affirmatively opt in — either by providing your number and checking an SMS consent option during signup, or through a separate opt-in for promotional messages. Providing an SMS opt-in is never a condition of creating an account, listing a vehicle, or booking a rental.

What we send: Depending on what you've opted into, this may include transactional messages (booking confirmations, pickup/return reminders, extension and fee notices), coordination messages between a host and renter, support responses, and — with separate opt-in — promotional messages about Jordi programs and offers.

No third-party marketing use: As stated in Section 4, your mobile number and SMS consent records are never shared or sold to third parties or Winixx affiliates for their own marketing or promotional purposes. Your number is used by Jordi, and by our SMS delivery provider strictly to transmit messages on our behalf, and for no other purpose.

Opting out: You can withdraw SMS consent at any time by replying STOP to any message, or by emailing support@jordi.winixx.net. We retain a record that you opted out so we can honor that preference going forward; we do not resume sending messages to an opted-out number without new, affirmative consent.

Getting help: Reply HELP to any message, or contact support@jordi.winixx.net, for questions about the messages you're receiving or how your mobile information is handled.

For the full terms governing our SMS program, including message frequency and carrier disclosures, see our Terms and Conditions.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the effective date at the top of this page. Continued use of Jordi after the effective date constitutes acceptance of the revised policy.