Railhq
TermsPrivacy

Privacy policy

This policy covers your Railhq account: the one sign-in at accounts.getrailhq.com that you use for Kickrail, Pathrail, Mailrail, Demorail and Seorail. Each tool has its own privacy policy for the data you put into it.

What we collect

  • your name and email address, and a hash of your password if you set one;
  • if you continue with Google: your Google account id, name and email address, and whether Google has confirmed that address. We ask Google for nothing else, and never see your Google password;
  • which Railhq tools you have signed in to, and the organisations and invitations you belong to;
  • sign-in records (time, IP address, browser), kept for security and to stop abuse;
  • billing details for the Railhq Pass, handled by Stripe. We do not store card numbers.

How we use it

To sign you in, keep your account secure, share your name and email with the Railhq tools you choose to sign in to, send you account emails (confirmations, password resets, invitations) and bill you. We do not sell your data or use it for advertising.

Who else handles it

  • DigitalOcean hosts the service and its database;
  • Google, only if you choose to continue with Google;
  • Mailrail and Amazon Web Services deliver our account emails;
  • Stripe processes payments.

These providers may process data outside your country, including in the United States and Canada.

Keeping and deleting it

We keep your account data while your account is open and delete it within 90 days after you close it, except records we must keep by law. Sign-in sessions expire on their own. To close your account or get a copy of your data, email support@getrailhq.com.

Security

Everything is encrypted in transit. Passwords are hashed, and sessions and tokens are stored only as hashes.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your personal data, or object to how we use it. Email support@getrailhq.com and we will reply within 30 days. You can also complain to your local data protection authority.

Last updated November 3, 2026.