Privacy policy

This policy explains what personal data OnRails (“we”) collects through onrails.run, and how we use and share it. Swapnil Gandhi is responsible for this data (its “controller” under EU and UK law).

Personal data we collect

When you book a demo. The form asks for your name and email, and optionally your company and a note about your workflow. When you send it, your answers and the time you sent it go to a Google Sheet in our account, and we get an email about it.

When you email us. We keep your messages and our replies.

When you visit. GitHub hosts the site and Cloudflare delivers it. Both receive your IP address, details of your browser and device, and the pages you request. They keep logs to run and secure their services. Google receives your IP address and browser details when you send the request form. If a page fails to load, your browser may also send Cloudflare a short error report.

Cookies. The site has no analytics, no advertising and no tracking pixels. It sets no cookies of its own and stores nothing in your browser. Cloudflare adds a small script that hides email addresses on the page from spam bots, and may set a short-lived security cookie if it needs to check that you aren’t a bot.

How we use personal data

We use personal data only to reply to you, to run and secure the site, and to meet legal obligations.

Legal bases (EU and UK)

Where EU or UK law applies, we rely on:

• steps you asked us to take, such as replying to your demo request
• our legitimate interests in answering emails and in keeping the site running and secure
• legal obligations

How we share personal data

We share personal data with Google, GitHub and Cloudflare, which host the site, run the request form and deliver our email for us. We may also share it if the law requires it, or to protect someone’s rights or safety. If OnRails is reorganized, merged or sold, your data may move with the business. We don’t sell personal data or share it for advertising.

Your choices

You don’t have to give us anything, but without your name and email we can’t reply. The site doesn’t track you, and no other company uses it to track you over time or across other sites. So Do Not Track and Global Privacy Control signals have nothing to turn off.

Your privacy rights

Wherever you live, you can email [email protected] to see your personal data, get a copy in a format you can take to another service, correct or delete it, or ask us to limit its use.

At any time, you can object to our use of your data for our legitimate interests.

We reply within a month. To protect you, we may ask you to confirm the request from the email address you used with us. In the UK you can also complain to the Information Commissioner’s Office, and in the EU to your data protection authority.

Other sites

Sites we link to have their own privacy policies.

Retention

We keep form submissions and emails as long as we need them to reply and follow up, and no longer than 24 months after our last exchange. If you ask, we delete them sooner. Google, GitHub and Cloudflare keep their logs under their own policies, and we keep no copies.

Security

We take reasonable steps to protect your data, but no system is perfectly secure.

Children’s privacy

The site isn’t meant for anyone under 18. We don’t knowingly collect their data, and if we find out we have, we delete it.

International visitors

We and our service providers are in the United States, so your data is processed there. Google, GitHub and Cloudflare take part in the EU-U.S. Data Privacy Framework and its UK Extension.

Changes to this policy

We post each new version here with a new “Last updated” date, which is when it takes effect.

Contact us

Send questions or requests to Swapnil Gandhi at [email protected].