LIMODIA PRIVACY POLICY (Effective Date: July 17, 2026)

This Privacy Policy explains how Limodia LLC ("Limodia," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with our websites, products, mobile applications, communications, demonstrations, support channels, and related services.

1. Scope. This Privacy Policy applies to personal information processed when: (a) you visit our website; (b) you request a demo; (c) you create or administer a Limodia account; (d) you communicate with us; (e) you use our software or related support services; or (f) we otherwise interact with you in a business, commercial, or service relationship.

This Privacy Policy does not replace any privacy notice that our customers provide to their own end users, passengers, drivers, or personnel.

2. Our Role. 2.1 Limodia generally acts as a controller/business for website visitors, demo requests, sales contacts, account administrators, billing contacts, support contacts, marketing subscribers, and security or analytics related to our services.

2.2 Limodia may act as a processor/service provider for personal information that business customers process through the Services, such as reservation, passenger, driver, dispatch, and communications data processed on their behalf.

2.3 Where Limodia acts as a processor/service provider, we process data under customer instructions and applicable service agreement or DPA. In those cases, the relevant customer is primarily responsible for its own privacy notices, legal bases, and rights responses.

3. Categories of Personal Information We Collect. Depending on context: 3.1 account and profile information; 3.2 business and billing information; 3.3 operational and service data; 3.4 support and communications information; 3.5 technical, device, and usage information; 3.6 security and fraud-prevention information; and 3.7 marketing and preference information.

4. Sources of Personal Information. We collect information directly from you, from your employer/business if you are designated as a user/contact, from customers using the Services, from integrations you authorize, from cookies/logs/SDKs and similar technologies, and from service providers or public sources where permitted by law.

5. How We Use Personal Information. We use personal information to provide, maintain, secure, support, and improve Services; administer accounts and access controls; process subscriptions and billing workflows; communicate with users and contacts; provide onboarding and support; monitor usage and develop features; prevent fraud and abuse; comply with law; and perform permitted marketing and business development activities.

6. Legal Bases for Processing. Where required by law, we rely on one or more of: contract performance, legal obligation, legitimate interests, consent where required, and other lawful bases under applicable law.

7. How We Disclose Personal Information. We may disclose information to service providers/subprocessors, professional advisors, affiliates, transaction counterparties, authorities where legally required, and other parties at your direction. We do not sell operational customer data to third-party advertisers.

8. International Transfers. We may process data in the United States and other countries where we or providers operate. Where required, we implement appropriate safeguards including contractual transfer mechanisms such as Standard Contractual Clauses.

9. Data Retention. We retain personal information as reasonably necessary to provide Services, maintain accounts, resolve disputes, enforce agreements, comply with legal obligations, and preserve security/audit records. Retention depends on data type and legal/operational requirements.

10. Security. We maintain administrative, technical, and organizational measures to protect personal information, including access controls, encryption where appropriate, logging, monitoring, network protections, vendor review, and incident response. No method is completely secure.

11. Customer Controls. Business customers can manage permissions, role scopes, data exports, and certain configurations through product controls or support. Customers remain responsible for their own configuration decisions and downstream data use.

12. Individual Rights. Depending on applicable law, individuals may request access, correction, deletion, portability, objection, restriction, or information about processing. If Limodia acts as processor/service provider, requests may be directed to the relevant customer first.

Where Limodia acts as controller/business, privacy requests may be submitted via info@limodia.com or /contact-form, subject to identity verification where required.

13. Marketing Communications. We may send service-related messages and, where permitted, marketing communications about products and updates. You may opt out of marketing via unsubscribe links or by contacting us. Service/security/billing messages may still be sent.

14. Children's Data. Services are not directed to children, and Limodia does not knowingly collect personal information directly from children in violation of applicable law.

15. Third-Party Links and Services. Our properties may contain links to third-party websites/services. Limodia is not responsible for third-party privacy practices.

16. AI Assistant Connector and Marketplace Services.

16.1 Information received through the connector. When you ask an AI assistant, such as ChatGPT or Claude, to find or compare transportation operators, the assistant may send Limodia the marketplace search parameters you provided. These parameters may include the city or metro area, pickup and drop-off locations, requested pickup date and time, passenger count, and vehicle preference. Pickup and drop-off locations may reveal sensitive information depending on the location and context. The connector search does not request or collect your name, phone number, email address, payment card details, or other booking contact information. A booking is completed on the selected operator's booking page, not through the connector.

16.2 How we use and protect connector search information. Limodia uses connector search parameters only to identify matching operators, filter suitable vehicles, calculate or display available price estimates, and prefill the booking link requested by you. Limodia does not use connector search parameters for advertising or to build a profile about you. To support route-price calculations efficiently, Limodia may temporarily cache route-resolution results. The cache key is a one-way SHA-256 hash of normalized city, pickup, and drop-off values rather than the plain-text addresses, and cache entries expire after approximately 30 minutes by default. Route-resolution error logs use a generic failure message and do not include pickup or drop-off addresses.

16.3 Booking links and operator disclosure. Search results may include a Book now link to an independent operator's booking page. If you choose that link, the trip details included in the link, such as pickup and drop-off locations, requested date and time, passenger count, and vehicle preference, are transmitted to that operator so its booking page can be prefilled. The operator's privacy notice and practices apply once you visit or submit information on its page. Limodia does not receive through the connector the name, contact, or payment information you later provide directly to the operator.

16.4 AI platforms. Connector requests reach Limodia through the AI platform you use. That platform may independently process your prompts, connector inputs, and connector results under its own privacy policy and settings. Limodia does not control the AI platform's separate data practices, and you should review the privacy terms of ChatGPT, Claude, or any other platform you use.

16.5 Unverified referral records. When an unverified directory listing appears in connector search results, Limodia records an operator-level referral event consisting of the unverified operator identifier, searched city, connector source, and event time. We use these events to count how often an unverified operator is surfaced. The referral record does not contain a user identifier, pickup or drop-off location, requested date or time, passenger count, vehicle preference, name, contact details, or payment information, and it is not used to track an individual user.

16.6 Operator verification documents. Operators may upload commercial auto insurance and its expiration date, business registration, an NYC TLC base license and its expiration date for NYC companies, the company owner's driver license, and a municipal limousine license for manual review. These documents are used only to evaluate and administer operator verification, maintain audit and compliance records, prevent misuse, and respond to legal obligations. Uploading a document does not itself grant verified status. Authorized Limodia administrators review the submitted records, and Limodia records the review status, review time, and reviewing administrator. Verification remains subject to current eligibility requirements, including a license record and insurance that has not expired.

16.7 Verification document security, disclosure, and retention. Verification documents are treated as private records. In our S3-hosted production storage, uploads use server-side AES-256 encryption at rest, transmission uses encrypted HTTPS connections, and document access is provided to the associated operator and authorized Limodia administrators through short-lived signed links. We do not use verification documents for advertising or sell them to advertisers. We retain them only as reasonably necessary for verification, audit, fraud prevention, dispute resolution, and legal obligations, after which they are deleted or de-identified where appropriate. Operators may contact info@limodia.com to request access, correction, or deletion, subject to identity verification and applicable retention requirements. No security control eliminates all risk.

16.8 Live driver location. During an active trip, an operator or driver may choose to share the location of the device used for dispatch. Limodia displays the newest coordinate only to the authenticated customer who owns that marketplace booking. Sharing can be stopped by the operator, completed or cancelled trips do not expose stored coordinates, samples older than approximately two minutes are no longer labeled live, and abandoned samples are deleted within 24 hours. Limodia does not use live driver coordinates for advertising.

17. Changes to this Privacy Policy. We may update this Policy from time to time. Material changes are posted with a revised effective date and additional notice where required.

18. Contact Information. Privacy Contact: info@limodia.com. Website: https://www.limodia.com.