Privacy Policy
JNN Global is the data controller for AxionOS. This policy explains what we collect, why, your rights under UK GDPR, and how to exercise them.
Effective 25 June 2026
1. Who controls your data
The controller is JNN Global, Fairford Road, Birmingham, B44 8DJ. For any privacy request or question, contact contact@evandeli.com.
2. What we collect
- Account data — name, email, phone, password (hashed), role, profile and cover images, bio.
- Verification data — identity and financial verification handled by Stripe Connect (KYC), plus insurance and trade credentials. We receive verification status and limited details, not your full identity documents.
- Job & transaction data — jobs posted, quotes, milestones, escrow funding/release, disputes, reviews, ACU purchases and unlocks.
- Lead data — construction project signals and business-contact details processed by our SignalCore engine (see section 4).
- Usage & device data — pages viewed, approximate location, device language and currency (used to localise the experience), and security/audit logs.
- Cookies & pixels — see our Cookie Policy.
We do not intentionally collect special-category data and ask that you don’t submit it in free-text fields.
3. Why we use it, and our lawful basis
- To provide the platform (accounts, matching, escrow, disputes) — performance of a contract.
- To verify trades and prevent fraud — legal obligation and legitimate interests in a safe marketplace.
- To source and route construction demand — legitimate interests (see section 4).
- To localise currency and language and improve the product — legitimate interests.
- For marketing cookies and analytics pixels — consent, which you can withdraw at any time.
- To meet tax, accounting and legal duties — legal obligation.
4. Lead intelligence — sourcing & transparency
SignalCore builds construction-demand intelligence from lawfully obtained, operator-configured and publicly published sources (for example planning portals, tenders and published project notices). We do not carry out covert scraping in breach of a site’s terms, and we honour suppression requests.
Where we process business-contact information for demand routing, our lawful basis is legitimate interests (connecting genuine projects with verified trades). You have the right to object — contact us and we’ll suppress your details from the platform.
5. Who we share data with
- Other users, only as needed to fulfil a transaction (e.g. a client and the trade they engage).
- Stripe, our payments and identity-verification processor.
- Service providers (hosting, email, analytics) under data-processing terms.
- Authorities, where legally required.
We never sell your personal data.
6. International transfers
Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
We keep personal data only as long as needed for the purposes above, then delete or anonymise it. Transaction, escrow and tax records are retained for the periods required by law (typically up to six years).
8. Your rights
Under UK GDPR you can:
- access a copy of your data;
- correct inaccurate data — much of it directly from your account;
- erase data (“right to be forgotten”), where applicable;
- restrict or object to processing, including direct marketing and legitimate-interests processing;
- port your data; and
- withdraw consent at any time.
To exercise any right, email contact@evandeli.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, though we’d appreciate the chance to put things right first.
9. Security
We protect accounts with hashed passwords, signed session tokens, role-based access control, edge route protection and audit logging, and we monitor for suspicious activity. No system is perfectly secure, so please use a strong, unique password.
10. Children
AxionOS is not intended for anyone under 18, and we don’t knowingly collect their data.
11. Changes
We’ll post any updates here with a new effective date and, for material changes, give reasonable notice.