Overview
At RailBird Inc. ("RailBird," "we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our payment processing platform, services, and related applications (collectively, the "Services").
This policy applies to all users of our Services, including merchants, end-users, website visitors, and anyone who interacts with our platform. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
Important Notice
If you do not agree with the terms of this Privacy Policy, please discontinue use of our Services immediately.
Information We Collect
We collect various types of information in connection with the Services we provide. This information can be categorized as follows:
2.1 Personal Information
When you register for an account or use our Services, we may collect:
- Identity Information: Full name, email address, phone number, date of birth, and government-issued identification documents
- Business Information: Company name, business registration number, tax identification number, business address, and industry classification
- Financial Information: Bank account details, payment card information, transaction history, and billing addresses
- Authentication Data: Passwords, security questions, and two-factor authentication credentials
2.2 Usage Information
We automatically collect information about your interaction with our Services:
- Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
- Log Data: Access times, pages viewed, links clicked, and the page visited before navigating to our Services
- Transaction Data: Payment amounts, currencies, merchant details, and transaction timestamps
2.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Identity verification services and fraud prevention partners
- Credit bureaus and financial institutions
- Marketing partners and analytics providers
- Publicly available sources and data aggregators
How We Use Your Information
We use the information we collect for various business and operational purposes, including:
Service Provision
- • Processing payments and transactions
- • Managing your account and authentication
- • Providing customer support
- • Sending service-related communications
Security & Compliance
- • Preventing fraud and unauthorized access
- • Complying with legal obligations
- • Conducting identity verification
- • Monitoring for suspicious activity
Analytics & Improvement
- • Analyzing usage patterns and trends
- • Improving our Services and features
- • Developing new products
- • Optimizing user experience
Marketing & Communication
- • Sending promotional materials (with consent)
- • Personalizing your experience
- • Conducting surveys and research
- • Providing relevant content
Data Sharing & Disclosure
We may share your information with third parties in the following circumstances:
Service Providers
We engage trusted third-party companies to perform functions on our behalf, such as payment processing, data analysis, fraud detection, customer service, and marketing assistance. These providers have access to personal information only as needed to perform their functions.
Business Partners
We may share information with business partners who jointly offer services with us or help us market our Services. This includes financial institutions, payment networks, and technology partners.
Legal Requirements
We may disclose information when required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or that of our users or the public.
Business Transfers
In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, your information may be transferred to the acquiring entity.
We Do Not Sell Your Data
RailBird does not sell, rent, or trade your personal information to third parties for their marketing purposes.
Data Security
We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:
Encryption
TLS 1.3 encryption for data in transit and AES-256 for data at rest
Access Controls
Multi-factor authentication and role-based access restrictions
Infrastructure
Secure data centers with 24/7 monitoring and redundancy
Compliance Certifications
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Active Accounts
Data is retained for the duration of your active account and for a period thereafter as required by applicable regulations.
Transaction Records
Financial transaction data is retained for a minimum of 7 years to comply with tax and financial regulations.
Closed Accounts
After account closure, we may retain certain information for legal, regulatory, or legitimate business purposes.
Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
Right to Access
Request a copy of the personal information we hold about you.
Right to Rectification
Correct inaccurate or incomplete personal information.
Right to Erasure
Request deletion of your personal information under certain conditions.
Right to Object
Object to certain processing activities, including marketing.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restrict
Limit how we process your personal information.
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within 30 days.
Contact Privacy TeamInternational Data Transfers
As a global payment platform, we may transfer your personal information to countries outside your country of residence, including the United States and other jurisdictions where we or our service providers operate.
Data Protection Safeguards
When transferring data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions recognizing equivalent data protection
- Binding Corporate Rules for intra-group transfers
Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Age Requirement
You must be at least 18 years old to use RailBird Services. If we learn that we have collected information from a child under 18, we will delete that information promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Notify you via email or through a prominent notice on our Services
- Update the "Last Updated" date at the top of this policy
- Provide a reasonable notice period before the changes take effect
Your continued use of our Services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Data Protection Officer
Mailing Address
RailBird Inc.
Attn: Privacy Department
123 Financial District
San Francisco, CA 94111
United States
Need Immediate Assistance?
Our privacy team is available 24/7 to address your concerns.
Related Legal Documents
View our complete legal framework