Version: 1 Last Updated: July 23, 2026 1. Who This Policy Covers This Privacy Policy explains how Old Route 9 LLC (“Company,” “we,” “us”) collects, uses, and shares personal information when you visit jumpd.io, sign up for a free trial or paid account, or otherwise interact with the Jumpd platform (the “Services”). Two different roles, two different rules. Jumpd is used by Account Holders (Sys Admin, Admin, Warehouse Staff, HR Staff, IT Staff) employed or engaged by our business customers (“Customers”), and it also has public-facing features — a public QR ordering flow and an HR/IT ticket submission feature — that may collect information from End Customers or other individuals who aren’t Jumpd account holders themselves. For data submitted through those public/End Customer flows, Company generally acts as a service provider/processor on behalf of the Customer, who controls that data. This policy covers our own site visitors and Account Holders directly; for End Customer data, our Customer’s own privacy policy governs, and Company handles that data under the terms of our Subscription Services Agreement with the Customer. Guests using the public QR ordering flow should also see our Public Ordering Notice, which should be linked from the ordering page itself, the same way the Cookie Disclaimer is already linked there. 2. Information We Collect Account and signup information: name, work email, company/Property name, role (e.g., Admin, Warehouse Staff), and login credentials when you create a trial or paid account. Usage data: actions taken in the Services, pages viewed, features used, timestamps, IP address, browser/device type, and similar log data — some of which we also retain in an audit trail as described in our Acceptable Use Policy. Order and ticket data: Order Items submissions collect the items you select and an optional notes field — no name or contact information is requested to place an order. HR and IT request submissions (available from the same page) collect a description of the issue and, optionally, the submitting person’s name; name is never required to submit a request. Cookies and similar technologies: We use a single category of cookie: a strictly necessary, first-party session cookie that authenticates you and keeps you signed in (for Account Holders) or keeps your order session active (for anonymous guests using the public QR ordering flow). The cookie itself holds only a session identifier, not your personal data, and expires automatically after 2 hours or when you log out or close the session. We do not use analytics, advertising, retargeting, or cross-site tracking cookies, and we do not sell or share cookie data with advertising networks. See our Cookie Disclaimer for full details. Billing information: There is currently no self-serve card entry in the Services. When you convert to a paid plan, our sales team sets up your subscription, and payment is processed through Stripe. Company does not directly collect or store your card or payment details — Stripe collects and processes that information under its own privacy policy. 3. How We Use Information We use the information above to: • Provide, operate, and maintain the Services, including your free trial • Authenticate Account Holders and enforce role- and Property-based access controls • Communicate with you about your trial, account, or support requests • Maintain the audit trail described in our AUP for security and enforcement purposes • Improve and troubleshoot the Services • Comply with legal obligations 4. How We Share Information We do not sell personal information. We may share it with: • Service providers who help us operate the Services (including hosting and payment processing), under confidentiality obligations • Your Customer organization, if you are an Account Holder — your Customer’s Admins and Sys Admins can see activity tied to your account as part of normal platform administration • Legal and safety purposes, where required by law or to protect the rights, property, or safety of Company, our Customers, or others • In connection with a business transfer, such as a merger or acquisition 5. Data Retention • Trial account data is retained for 90 days after the Trial Period ends. If the account has not converted to a paid plan by then, the data is automatically and permanently purged. • Paid account data is retained for 5 years, consistent with our general retention period for audit purposes. • Order data submitted through the public QR ordering flow is retained for 5 years by default; a Customer may request that this period be extended or shortened for their account. • HR/IT ticket data is retained for 5 years. • Audit trail / log data is retained for 5 years for security and compliance purposes. 6. Your Rights and Choices Depending on where you’re located, you may have rights to access, correct, delete, or export your personal information, or to object to certain processing. To exercise these rights, contact us at [email protected]. If you are an Account Holder, some requests may need to go through your Customer organization’s Sys Admin, since they control your account within the Services. As of this version, Company does not knowingly serve customers located in the EU, UK, or California. If that changes, this section will need to be expanded with jurisdiction-specific disclosures (e.g., GDPR/UK GDPR legal basis for processing, or CCPA/CPRA opt-out rights) before onboarding customers there — revisit this policy at that point rather than relying on this general language. 7. Security We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including the access logging and audit trail described in our AUP. No system is completely secure, and we cannot guarantee absolute security. 8. Children’s Privacy The Services are intended for business use by adults and are not directed to children. We do not knowingly collect personal information from children under 16. 9. International Data Transfers Company does not currently have Customers located outside the United States, and our data is hosted domestically. If that changes, this section will be updated to describe the applicable transfer mechanism. 10. Changes to This Policy We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date above and post a notice on jumpd.io. Continued use of the Services after a change constitutes acceptance of the updated policy. 11. Contact Us Questions about this Privacy Policy or your personal information can be directed to [email protected], or by mail to: Old Route 9 LLC, 6545 Market Ave N STE 100, Canton, OH 44721