Legal
Privacy Policy
Last updated 13 October 2026
We keep your account and saved projects to provide RAD. If you allow optional usage analytics, we also measure which pages and features are used and how well they work. We never sell your data. You can change your analytics choice below and ask to see, correct or delete your personal data.
1Who this covers
This policy explains how Moyukh Roy, who operates RAD at radrailway.com ("we", "us"), handles personal data when you visit the site or use the designer. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
2What we collect
| Data | Why |
|---|---|
| Email address, and the name you choose | To create your account, sign you in and send sign-in, confirmation and password-reset emails |
| Your Google name, email address and profile picture, if you sign in with Google | To create your account and fill in your profile name and photo. We ask Google for nothing else and never see your Google password. |
| Password | Handled by our sign-in provider and stored only as a secure hash. We never see it. |
| Optional profile details (photo, headline, company, professional role, discipline, location, website, bio) | To show your profile to people you share projects with |
| Projects, versions, comments and shares you save to your account | To store your work, keep its history and share it with the people you choose |
| Plan feature interactions (account ID, feature category, event and time) | To count blocked export attempts, Pro detail views, sample views and upgrade request clicks. No project data is included, and a request click does not mean an email was sent. |
| Pro access requests, optional messages, decisions and approval history | To let you request access, show request status and administrator decision notes, and record who approved, rejected or revoked access and when. This workflow does not charge you or send an email. Requests are operational records, independent of optional analytics. |
| Shared Gemini fallback and voice usage counts | To apply fair-use allowances. Local Ask answers do not make AI requests or consume the shared AI allowance. |
| Payment and plan records, when paid plans are offered | To bill you, keep tax records and give you the features you paid for |
| Technical data (IP address, browser, pages and API routes requested, errors) | To run, secure and fix the service |
You can optionally add a contact phone number when signing up or editing your profile. This contact field is available to you and authorised service administrators; it is not part of the profile shared with project collaborators. It does not change your sign-in phone number or subscribe you to calls, SMS or marketing.
The administrator user directory shows registered accounts, their supplied name, email, contact phone, organisation and location, account and plan status, signup and last sign-in times, and totals for currently owned cloud projects and their saved alignment lengths. These account-management records are separate from optional usage analytics. The directory does not inspect unsaved local files or infer your location from alignment coordinates.
In-app notifications record relevant account decisions, collaboration events, and administrator-published feature updates and newsletters, along with whether you have read or dismissed them. Each inbox is visible only to its recipient. Notification links respect current project access. Feature updates and newsletters are enabled by default inside the app; you can turn either category off in Notification Centre preferences for future publications. These preferences are separate from optional analytics and do not affect account or collaboration notifications. This feature does not send email, SMS or browser push notifications or subscribe you to an email mailing list. Private contact details, notification records, and notification preferences are removed when the account is deleted.
We do not collect data about your health, finances or other sensitive categories, and we do not knowingly collect data from children.
3What stays on your device
The designer keeps drafts, recovery copies, settings and an offline copy of the app in your browser's storage (local storage, IndexedDB and the service worker cache). This stays on your device until you clear it. Your sign-in session is also stored there. We do not use advertising or tracking cookies.
Ask conversations and Gemini fallback
Ask first handles supported requests in your browser using the current project and application engines, without sending an AI request. Automatic Gemini fallback is enabled by default for requests that the local resolver cannot handle. You can turn it off in Ask settings. When fallback is used, your question, relevant conversation and project/tool context pass through our server to Google Gemini. Ordinary map/source lookups and cloud saves remain separate connected features.
Ask conversations are stored per project in this browser, separately from saved project documents. An optional personal Gemini key is also stored in this browser and can be removed in Ask settings. When you use that key, it passes through our assistant server to Google for the request; our application does not persist it on the server. A personal key changes whose Gemini account is used, not the transmission path. Conversations and keys are not included in exported project files.
Optional usage analytics
Optional analytics starts only when you choose to allow it. It records named pages and features, workflow starts and completed, cancelled or failed action categories, broad device, country and traffic-source categories, and supported page-performance measurements. Short-lived random session and operation identifiers connect a workflow attempt to its outcome. When you are signed in, events may be linked to your account ID to measure feature adoption and return visits.
These events stay in RAD's Supabase database and are available as aggregate reports to authorised administrators. They do not include project documents, project names, alignment coordinates, form contents, passwords, full browsing URLs or recordings of your screen. We do not store raw IP addresses in analytics events. The collection endpoint uses a temporary one-way identifier to limit excessive requests.
Your choice is remembered on this device. You can decline or withdraw at any time without losing designer features. Withdrawing stops future optional collection and clears the local analytics session; it does not automatically erase events already received. Contact us to request deletion of account-linked events. Global Privacy Control and Do Not Track signals disable optional collection.
Cloud project creation, successful saves, task changes and existing plan-interest records are operational records described above. We also record when a newly registered account first saves a design containing a non-empty alignment, using the account's actual signup time and the server-confirmed save time. The milestone contains no design content. Administrators can review aggregate counts of these records independently of optional analytics. Counts describe recorded actions, not hours worked, engineering quality or an assessment of someone's productivity.
4Who processes data for us
We use these providers to run RAD. They process data on our instructions and only for the purposes below. Some are located outside India.
| Provider | What they do |
|---|---|
| Vercel | Hosts the website and its server functions, and keeps request logs |
| Supabase | Accounts, sign-in emails, database and file storage |
| Signs you in when you choose “Continue with Google”, and serves your Google profile picture. The Google sign-in button is loaded from Google when the sign-in panel opens, so Google sees your IP address and browser even if you sign in with email. | |
| OpenStreetMap services (Nominatim, Overpass) and map tile providers (OpenStreetMap, OpenTopoMap, Esri) | Place search, mapped features and map imagery. Your browser loads map tiles directly, so these providers see your IP address. |
| Amazon Web Services (public terrain tiles) | Terrain heights, fetched through our server |
| Google (Gemini) | Provides Ask's AI fallback when a request cannot be handled locally and fallback is enabled. The question, relevant conversation and project/tool context are sent through our server. The same route is used with the site's key or your optional personal Gemini key. Local Ask answers make no AI provider call. |
| Sarvam AI and Groq | Turn announcement text in the cab ride into speech. Only the announcement text is sent. |
| Payment provider (such as Razorpay), when paid plans are offered | Takes payments and keeps the records the law requires. We never receive your full card or bank details. |
We do not sell your personal data, and we do not share it for advertising. We disclose data to authorities only when the law requires us to.
5How long we keep it
- Account, project and Pro request data: while your account is open. When you delete a project, or we close your account at your request, we delete it from the live database, and backups roll over within 30 days.
- Older autosaved project versions are thinned out automatically, while the versions you saved deliberately are kept.
- Optional usage analytics: raw events are scheduled for deletion after 90 days. Rate-limit records are scheduled for deletion after 24 hours. Account-linked analytics events are deleted when the account is deleted.
- Technical logs: kept by our hosting provider for a limited period, normally no more than 30 days.
- Payment and invoice records: for as long as tax and accounting law requires, normally eight years.
6Your rights
You can ask us to give you a summary of the personal data we hold about you, correct or complete it, or erase it. You can also withdraw your consent, nominate someone to act for you, and raise a grievance. You can edit your profile and delete projects yourself in the designer. To close your account or for anything else, write to moyukh229197@gmail.com. We will reply within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
7Security
Data travels over HTTPS. Access to your projects in the database is limited to you and the people you share them with and our own systems are protected by access controls. No system is completely secure, so please use a strong password and tell us about anything suspicious.
8Changes to this policy
We will post any update here with a new date, and tell signed-in users about significant changes before they apply.
9Grievance officer
Moyukh Roy, email moyukh229197@gmail.com. We aim to acknowledge a grievance within 24 hours and to resolve it within 15 days.