Privacy Policy

1. Who we are

Jordi is a peer-to-peer car rental marketplace operated by Winixx Inc. ("Winixx," "we," "us," or "our"), a company incorporated in the United States. Our registered address is available upon request at privacy@winixx.net.

When you use Jordi — whether as a renter, a host, or a visitor — this Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have.

2. Information we collect

Account information: When you register, we collect your name, email address, phone number, and password. Hosts additionally provide a physical address and banking information for payouts.

Identity verification: We use Stripe Identity to verify government-issued photo ID. Stripe processes and stores identity documents; we receive only a verification status (verified / failed). We do not store copies of your ID.

Vehicle information: Hosts provide vehicle details, photos, registration documents, and insurance certificates when listing a vehicle.

Booking and transaction data: We collect dates, pricing, booking status, messages between hosts and renters, and transaction records for every booking.

Trip photos: During pickup and drop-off inspections, renters capture live photos of the vehicle. These are stored securely and automatically deleted 30 days after the rental ends.

Location data: With your permission, we access your device's GPS to:

• Show vehicles near your current location on the browse page
• Track your location during an active trip so the host can see the vehicle's general area
• Verify you are within 0.1 miles of the drop-off address before completing a return

Location tracking during a trip stops immediately when the rental is marked complete or cancelled. We do not share your precise location with anyone other than the host of your active rental.

Device and usage data: We automatically collect IP address, browser type, device identifiers, pages visited, and feature usage for security monitoring and product improvement.

Communications: Messages sent through the Jordi messaging system are stored and may be reviewed by our support team to resolve disputes.

3. How we use your information

• To create and manage your account
• To facilitate bookings, payments, and payouts between renters and hosts
• To verify identities and prevent fraud
• To enforce our Terms of Service, including our geofence return policy and late penalty rules
• To send you booking confirmations, receipts, and service communications by email
• To respond to your support requests and resolve disputes
• To improve the Jordi platform through aggregate, anonymized analytics
• To comply with legal obligations, including tax reporting

We do not use your data for advertising. Jordi products are ad-free.

4. How we share your information

With your booking counterpart: When a booking is confirmed, renters and hosts receive each other's first name, last initial, and phone number. Full names and contact details are not shared before confirmation.

With Stripe: Payment processing, identity verification, and host payouts are handled by Stripe, Inc. Stripe acts as a data processor under its own privacy policy.

With HERE Technologies: We use HERE's mapping and reverse-geocoding APIs to display location data. GPS coordinates are transmitted to HERE only to resolve a human-readable city/neighborhood label.

With Winixx group companies: Jordi is part of the Winixx platform family. Your account is shared with other Winixx products you have authorized. We do not share your data with Winixx for unrelated commercial purposes.

For legal compliance: We may disclose information if required by law, subpoena, or government request, or to protect the rights, property, or safety of Winixx, our users, or the public.

We do not sell your personal data. We have never sold personal data and have no plans to do so.

5. Data retention

• Trip photos: Deleted 30 days after rental completion
• Location data: Purged when the trip ends
• Account data: Retained while your account is active and for 3 years after deletion, as required for financial and dispute records
• Transaction records: Retained for 7 years for tax and legal compliance
• Messages: Retained for 2 years, then archived or deleted

6. Security

We use industry-standard security practices including TLS encryption in transit, AES-256 encryption at rest for sensitive fields, access controls limiting who on our team can view personal data, and regular security reviews. No system is perfectly secure. If you discover a vulnerability, please report it to security@winixx.net.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data (subject to retention requirements above)
• Port your data to another service
• Object to certain processing activities
• Opt out of the sale of personal data (we do not sell data, but you may submit a request under CCPA at the link below)

To exercise any of these rights, email privacy@winixx.net or use our Do Not Sell My Information form. We will respond within 30 days.

8. Cookies and tracking

Jordi uses session cookies for authentication. We do not use third-party advertising cookies or cross-site tracking pixels. If you disable cookies, you will not be able to stay logged in.

9. Children's privacy

Jordi is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us at privacy@winixx.net and we will delete it promptly.

10. California residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act. You have the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale of personal information. As noted above, we do not sell personal information. To submit a CCPA request, use our Do Not Sell My Information page or email privacy@winixx.net.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the effective date at the top of this page. Continued use of Jordi after the effective date constitutes acceptance of the revised policy.