Privacy Policy

Rail Ops — Effective Date: May 13, 2026

1. Introduction

Welcome to Rail Ops, operated by InternetMill LLC ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

Account registration information: name and email address
Payment information: billing details processed securely through our payment processor (Stripe, Inc.)
User-generated content: any data, files, or content you create, upload, or submit through the Service

2.2 Information Collected Automatically

Usage data: pages visited, features used, actions taken, session duration, and other interaction data
Device and technical data: IP address, browser type, operating system, referring URLs
Cookies and similar tracking technologies (see Section 6)

3. How We Use Your Information

We use the information we collect to:

Create and manage your account and provide the Service
Process payments and fulfill transactions
Send transactional emails (account confirmations, receipts, support responses)
Notify our team of new signups and communicate with you about your account
Monitor and analyze usage patterns to improve the Service
Detect, investigate, and prevent fraudulent or unauthorized activity
Comply with legal obligations

If you are located in the European Union or United Kingdom, we process your personal data under the following legal bases under the General Data Protection Regulation (GDPR) and UK GDPR:

Contract performance: processing necessary to provide the Service you have signed up for
Legitimate interests: analytics, security, fraud prevention, and direct communication with users about the Service — balanced against your rights and not overriding them
Legal obligation: where processing is required to comply with applicable law
Consent: where we have obtained your explicit consent (e.g., optional marketing emails)

You have the right to object to processing based on legitimate interests. To exercise this right, contact us at the address in Section 10.

5. Canadian Users — PIPEDA

If you are located in Canada, we collect, use, and disclose your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

We collect only the information necessary for the identified purposes, obtain your knowledge and consent where required, and retain information only as long as necessary to fulfill those purposes or as required by law.

You have the right to access your personal information and to challenge its accuracy. To make a request, contact us at the address in Section 10.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Service. These may include:

Essential cookies: required for the Service to function (authentication, session management)
Analytics cookies: help us understand how users interact with the Service

You may control cookie preferences through your browser settings. Disabling certain cookies may affect Service functionality. We do not sell data collected through cookies to third parties.

We do not sell your personal information. We share your information only in the following limited circumstances:

7.1 Payment Processor

We use Stripe, Inc. to process payments. When you make a purchase, your payment information is transmitted directly to Stripe and is subject to Stripe's Privacy Policy. We do not store full payment card details on our servers.

7.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of our company, users, or others.

7.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Service prior to any such transfer.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time (see Section 9).

We may retain certain information after account deletion as required by law, for fraud prevention, or to resolve disputes.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: request a copy of the personal data we hold about you
Correction: request correction of inaccurate or incomplete data
Deletion: request deletion of your personal data ("right to be forgotten")
Portability: receive your data in a structured, machine-readable format (EU/UK users)
Objection: object to certain types of processing (EU/UK users)
Restriction: request that we restrict processing of your data in certain circumstances
Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at support@railops.app. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

EU/UK users also have the right to lodge a complaint with their local data protection authority.

10. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), access controls, and monitoring.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

11. International Data Transfers

We operate globally and your information may be transferred to and processed in countries other than your own, including the United States. If you are located in the EU, UK, or Canada, note that these countries may have different data protection laws than your country.

Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses approved by the European Commission.

12. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 where required by applicable law). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the Effective Date above, and where appropriate, by sending you an email notification.

We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

InternetMill LLC

Email: support@railops.app
Website: https://railops.app