Security

Security is foundational to Winixx Freight. We use layered safeguards to protect accounts, data, and transactions against cyber crime, fraud, and unauthorized access. This page explains our security controls, your responsibilities, and how to report phishing or suspicious activity.

---

Table of Contents

1. Overview
2. Account Security and 2FA
3. Data Protection and Encryption
4. Monitoring, Fraud Prevention, and Enforcement
5. Email Security and Phishing Awareness
6. Report Phishing
7. User Responsibilities and Best Practices
8. Incident Response and Account Recovery
9. Vulnerability Reporting
10. Disclosures, Liability, and Your Responsibility
11. Contact

---

1) Overview

Winixx Freight uses a defense-in-depth security model. This includes authentication controls, encryption, monitoring, access restrictions, and operational safeguards designed to reduce risk and protect the Platform. No security program can eliminate risk entirely, but we continuously improve our controls as threats evolve.

2) Account Security and 2FA

The Platform enforces strong authentication requirements designed to protect user accounts and reduce unauthorized access.

• Two-factor authentication (2FA): Where enabled or required, users must complete 2FA during sign-in or sensitive actions.
• Password requirements: Password complexity and strength requirements apply to reduce credential compromise.
• Access controls: Role-based permissions restrict access to features and sensitive actions.
• Rate limiting: Login attempts may be limited to deter brute-force attacks.
• Session security: Session controls help prevent unauthorized reuse of credentials on new devices or sessions.

Users must never share passwords, 2FA codes, or recovery codes with any person, including anyone claiming to represent Winixx Freight.

3) Data Protection and Encryption

We use industry-standard protections for data transmitted through the Platform. Where applicable, sensitive data is protected using encryption in transit and at rest. Access to sensitive systems and data is restricted based on necessity and least-privilege principles.

We may also implement measures such as secure key management, audit logging, and controlled access to reduce risk of unauthorized disclosure.

4) Monitoring, Fraud Prevention, and Enforcement

We monitor Platform activity for suspicious behavior and potential abuse. Monitoring may include:

• Login patterns, device signals, and unusual access behavior
• Transaction activity related to funding, wallet use, and payouts
• Shipment workflow patterns and suspicious marketplace activity
• Indicators of compromise, malware, or automated abuse

We reserve the right to restrict, suspend, or terminate access to protect users and the Platform, including during investigations of suspected fraud, cyber crime, prohibited behavior, or other risks.

5) Email Security and Phishing Awareness

Email phishing and impersonation are common forms of cyber crime. Attackers may attempt to trick you into revealing passwords, authentication codes, or payment details. Always verify before you trust.

Winixx Freight will never:

• Ask for your password, one-time codes, or recovery codes by email, text, or phone
• Ask you to install software or "security tools" to access your account
• Demand payment, wire transfer, gift cards, or crypto to resolve an account issue
• Request that you share private credentials or bypass security measures

Common phishing red flags:

• Urgent threats like "account will be terminated today" or "immediate action required"
• Unexpected attachments or links asking you to sign in
• Misspelled domains, look-alike URLs, or strange sender addresses
• Requests for passwords, 2FA codes, or sensitive business information

If you are unsure whether a message is legitimate, do not click links. Instead, access the Platform directly by typing the official website address into your browser.

6) Report Phishing

If you receive a suspicious message that claims to be from Winixx Freight, report it immediately using the steps below. Early reporting helps us protect you and other users.

7) User Responsibilities and Best Practices

You play a critical role in keeping your account and business safe. You agree to:

• Use strong, unique passwords and do not reuse them across services
• Enable and maintain 2FA where available or required
• Protect access to your email account, since it may be used for password resets
• Use updated devices and browsers and install security updates promptly
• Log out on shared devices and avoid using public Wi-Fi for sensitive actions
• Never share credentials, 2FA codes, or recovery codes
• Immediately notify us if you suspect unauthorized access

Users must not attempt to bypass security controls, probe the Platform for vulnerabilities, introduce malware, scrape data, or interfere with Platform operations.

8) Incident Response and Account Recovery

If you suspect compromise, take these steps immediately:

1. Change your password immediately and enable 2FA if not already enabled.
2. Review recent account activity and remove any unknown devices or sessions where available.
3. Check your email forwarding rules and mailbox security settings for suspicious changes.
4. Contact Winixx Freight using the contact methods below and include relevant details.

We may require additional verification to restore access or to protect the account from further harm.

9) Vulnerability Reporting

If you believe you have discovered a security vulnerability, report it responsibly. Do not publicly disclose vulnerabilities and do not attempt to access data that is not yours.

Send vulnerability reports to security@winixxfreight.com with a clear description and steps to reproduce.

10) Disclosures, Liability, and Your Responsibility

Winixx Freight implements safeguards designed to protect the Platform, but no online service can guarantee absolute security. To the maximum extent permitted by law, Winixx Freight is not responsible for losses resulting from:

• User failure to secure credentials, email accounts, devices, or 2FA codes
• Phishing, social engineering, or impersonation attacks that rely on user action
• Malware or device compromise outside of Winixx Freight systems
• Unauthorized access caused by credential sharing or weak password practices

Users remain responsible for maintaining the security of their accounts, devices, and email access. You agree to cooperate with reasonable security investigations and remediation steps if suspicious activity is detected.

11) Contact

For security concerns, phishing reports, or vulnerability disclosures:
security@winixxfreight.com

For account support and general inquiries:
support@winixxfreight.com