Legal

Privacy policy

Effective date: 2026-05-09

This policy explains how Identrail, Inc. (“Identrail”) collects and processes personal data when you visit our website at identrail.com or use our hosted product. We collect the minimum data needed to operate the service and we do not sell personal data.

Data we collect

  • Account data — name, work email, employer, role. Used to authenticate you, contact you about service updates, and bill you when applicable.
  • Usage data — page views and product events, processed via Google Analytics 4 and PostHog with IP-truncation enabled. Used to understand which features matter and which pages need rewriting.
  • Tenant data — the trust-graph metadata you connect to Identrail (identities, roles, policies, RBAC bindings). Stored in your tenant only. Not used to train any model.

Where data is processed

Hosted Team customers pick US (us-east-1) or EU (eu-west-1) at sign-up. Enterprise customers pick a region or run a private deployment. Self-host customers process all data in their own environment.

Sharing

We use a small number of subprocessors (cloud hosting, email delivery, analytics, error tracking). The current list is available on request via privacy@identrail.com. We do not sell personal data to third parties.

Your rights

If the GDPR or comparable laws apply to you, you have rights of access, correction, deletion, and portability. Email privacy@identrail.com and we will respond within 30 days.

Contact

Questions? privacy@identrail.com. We will respond within one business day.