Privacy Policy

Who We Are

Railcrew Xpress ("RCX," "we," "us," or "our") provides crew transportation services to the railroad industry. This privacy policy applies to the Railcrew Xpress Client Portal and associated web applications hosted at rcxclient.com and its subdomains (collectively, the "Services").

Our main website is www.railcrewxpress.com. Our business address is 101 Armour Road, Suite B, North Kansas City, MO 64116.

Overview

This Privacy Policy describes how Railcrew Xpress collects, uses, discloses, and safeguards your personal information when you access or use our client-facing web applications and services. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

Information We Collect

Information Provided Through Authentication

When you sign in to our Services using your organization's identity provider (such as Microsoft Entra ID), we may receive the following information:

Your name and email address
Your organization name and identifier
Unique user identifier assigned by your identity provider
Profile information shared by your identity provider (such as job title or department)

Information Collected Automatically

When you access our Services, we automatically collect certain information, including:

Internet Protocol (IP) address
Browser type and version
Operating system
Pages visited and features used within our Services
Date and time of access
Referring URL

Information Generated Through Use

As you use our Services, we collect and store data related to your activity, such as trip requests, search queries, report configurations, and preferences you set within the application.

How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain our Services
To authenticate your identity and manage access to your account
To personalize your experience within our applications
To process and fulfill trip-related requests and operations
To communicate with you regarding your use of the Services, including support and notifications
To monitor and analyze usage patterns to improve our Services
To detect, prevent, and respond to security incidents and technical issues
To comply with applicable legal obligations

Cookies and Tracking Technologies

Our Services use cookies and similar technologies to support authentication, maintain your session, and remember your preferences. Specifically:

Authentication Cookies: Required to keep you signed in and verify your identity during a session. These are essential for the Services to function.
Preference Cookies: Used to store your display settings and application preferences.
Analytics: We may use analytics services to understand how our Services are used. These services may collect information about your interactions with our applications.

You can manage cookie preferences through your browser settings. However, disabling essential cookies may prevent you from using our Services.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

With Your Organization: Information about your use of the Services may be shared with authorized representatives of the organization through which you access our Services.
Service Providers: We may share information with third-party service providers who perform services on our behalf, such as cloud hosting, analytics, and technical support. These providers are contractually obligated to protect your information.
Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Protection of Rights: We may disclose information to protect the rights, property, or safety of Railcrew Xpress, our users, or the public.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using TLS/SSL
Authentication through enterprise identity providers (Microsoft Entra ID)
Role-based access controls
Regular security assessments

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

Access: You may request a copy of the personal information we hold about you.
Correction: You may request that we correct inaccurate or incomplete personal information.
Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
Data Portability: You may request a copy of your data in a structured, machine-readable format.
Objection: You may object to certain processing of your personal information.

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Third-Party Links

Our Services may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically for any changes. Continued use of our Services after changes are posted constitutes your acceptance of the revised Privacy Policy.