Privacy Policy

Information We Collect

We only collect the PNR number you explicitly enter to provide the prediction service. We do not store any personal identifiable information (PII) like names, phone numbers, or email addresses associated with the PNR.

• PNR details and journey context you enter for prediction or analysis.
• Optional contact details (email, phone) when you purchase plans or request support.
• Basic technical data such as browser type, device category, and diagnostic logs.

Cookies & Analytics

We use local storage to save your recent searches on your device. We also use generic analytics to understand feature usage.

We use cookies and local storage to remember language preference, login/access sessions, checkout progress, and recent tool interactions so users can continue their journey without re-entering the same details repeatedly.

Advertising

We use Google AdSense to serve ads. Google may use cookies to serve ads based on your prior visits to our website or other websites.

How We Use Information

• Generate waitlist and confirmation insights for your requested route/date/class.
• Deliver purchased analysis, credits, payment receipts, and history access links.
• Detect abuse, fraud, and suspicious activity to protect users and platform stability.
• Improve model quality, error handling, and user experience through aggregated analytics.

Data Retention

We retain account, order, and ledger records for operational, support, and compliance needs. Session-level diagnostic logs are retained for a shorter period and rotated regularly. Data no longer required for legal or operational reasons is deleted or anonymized.

Data Sharing and Third Parties

We do not sell personal data. We share limited information only with service providers needed to run RailTC, such as payment gateways, analytics providers, cloud infrastructure vendors, and communication services. These partners process data under contractual controls.

User Rights and Choices

• Request access to your stored account/order data.
• Request correction of inaccurate contact or profile data.
• Request deletion where retention is not legally required.
• Control cookie usage through browser settings.

Security

We use industry-standard safeguards such as TLS in transit, access controls, and monitoring. No internet service is fully risk-free, but we continuously improve safeguards to reduce risk.

Children's Privacy

RailTC is not directed to children under 13. If you believe a child has submitted personal data, contact us so we can review and remove it where appropriate.

Your Rights Under GDPR and Applicable Laws

We process personal data on two legal bases: legitimate interest (delivering and improving our prediction and analysis services) and consent (cookies, analytics tracking, and personalized advertising). You may withdraw consent at any time without affecting the lawfulness of prior processing.

Under GDPR and other applicable data protection laws, you have the right to:

• Access request a copy of the personal data we hold about you.
• Rectification request correction of inaccurate or incomplete data.
• Erasure request deletion of your personal data where retention is no longer necessary.
• Data portability receive your data in a structured, machine-readable format.
• Objection object to processing based on legitimate interest.
• Restrict processing request that we limit how we use your data while a concern is resolved.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days of receiving your request.

If you are a resident of the European Union, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have not been adequately addressed.

Policy Updates and Contact

We may update this policy to reflect legal, product, or operational changes. Material updates will be reflected through the "Last updated" date on this page.

For privacy questions or requests, contact us at [email protected].