Raid Train ExpressTrain Schedules

Privacy Policy

Effective Date: September 14, 2026

1. Introduction

We value your privacy. This Privacy Policy explains how Raid Train Express ("we", "us") collects, uses, and protects your personal information when you use our Platform.

2. Information We Collect

Account Information: Email address, name, profile data (bio, categories, avatar), platform username.

Usage Data: Train participation, ratings, analytics events, feature usage, and AI support chat interactions.

Payment Data: Processed by Polar. We do not store credit card numbers.

Technical Data: IP address, browser type, device info, essential cookies for session management, and consent preference storage.

Connection Data: When you connect an AI assistant to your account, we store which assistant you authorized, the permissions you granted it, when the connection was created, when it was last used, and its authorization tokens in encrypted form.

Whatnot Public Data: When you provide a Whatnot username, we retrieve publicly available information about that Whatnot account — whether it exists, its display name, seller status, follower count, items sold, rating and review count, and its public live-show schedule. See Section 10 for details.

3. How We Use Your Information

We use your information to: (a) provide and improve the Platform; (b) process subscriptions; (c) send notifications and communications; (d) enforce our Terms; (e) aggregate anonymous analytics; (f) provide AI support responses and detect misuse or abuse of AI features.

4. Data Sharing

We do not sell your personal data. We share information with: (a) Polar for payment processing; (b) Supabase for data storage; (c) Google as our AI provider for help-assistant responses; (d) AI assistants you choose to connect to your account — information returned to a connected assistant leaves our systems, and what that provider does with it is governed by their own privacy policy; (e) Apify, a data-collection platform we use to retrieve public Whatnot information — the Whatnot username being looked up is sent to that service; (f) as required by law.

5. Data Retention & Deletion

We retain your data while your account is active. You may request deletion of your account and associated personal data at any time by using the delete option in your account settings or by contacting us at privacy@raidtrainexpress.com. Upon receiving a deletion request, we will delete your account and associated personal data within 30 days. Anonymized, aggregated analytics that cannot be linked back to you may be retained indefinitely.

For AI help-assistant logs (kb_chat_logs), we retain logs for up to 30 days and then automatically delete older records. You may request early deletion of these logs at any time.

AI assistant connection records and their stored tokens are removed when you revoke the connection or delete your account.

6. Your Rights (GDPR/CCPA)

You have the right to: (a) access your data; (b) correct inaccurate data; (c) request deletion; (d) data portability (export); (e) opt out of marketing; (f) withdraw consent. You can withdraw or update cookie consent at any time from the consent banner (when shown) or your profile settings after signing in.

You may also request access to or deletion of AI help-assistant chat logs associated with your account, subject to our legal and security obligations. Contact us to exercise these rights.

7. Cookies

We use essential cookies for authentication and session management. Optional analytics cookies require your consent.

When you make a cookie choice:

  • If you are not signed in, we store your preference in your browser's local storage so we can remember your choice on this device.
  • If you are signed in, we store your preference on your profile so it can be managed later in your settings.

You can change your consent preference later; updates apply going forward.

8. AI Help Assistant (KB Chat)

When you use our AI help assistant, we process:

  • Your chat messages.
  • Recent chat history from the same session.
  • Optional train context (for example train ID, title, status, and your role) when relevant to your request.
  • System-generated flags related to misuse prevention and context gaps.

This processing is used to provide support answers, improve assistant quality, and protect the platform from abuse.

AI chat logs are stored in our database and reviewed in admin tools in an anonymized display format. Internally, logs remain linked to account identifiers for security, moderation, and rights-request handling.

9. AI Assistant Connections

You can connect a third-party AI assistant to your Raid Train Express account. Connections are optional and off until you authorize one.

Once connected, an assistant can read:

  • Your profile — username, timezone, and role.
  • Your upcoming schedule, including your slot times and to-do due dates.
  • Trains and challenges you organize or take part in. When you are an organizer, this includes other participants' usernames and their to-do completion state.
  • Our published help documentation.

A connected assistant can also create trains and challenges on your behalf, through a guided questionnaire that shows you the full plan before anything is created. Your in-progress answers to that questionnaire are stored until it is completed or cancelled.

A connection can only ever access what your own account can access — the same row-level security that governs the web app applies to every request it makes. Its authorization tokens are encrypted at rest using AES-256-GCM. You may revoke a connection at any time from Settings → Connections, which invalidates its access immediately.

10. Whatnot Public Data

Your Whatnot username identifies you across the Platform, and we verify that it belongs to a real Whatnot account. As part of verification — and when you or an authorized organizer use features that reference your Whatnot account (such as linking a show to a slot), or when we periodically refresh this data — we retrieve publicly available information about that account from Whatnot:

  • Whether the account exists, and its display name.
  • Seller status — whether the account is able to sell on Whatnot.
  • Public metrics: follower count, items sold, rating, and review count.
  • The account's public live-show schedule, when you use show-linking features.

This is the same information any visitor to your public Whatnot page can see; we never access private Whatnot account data, and we never receive your Whatnot login credentials.

Display and opt-out: Your Whatnot metrics (rating, followers, items sold) are shown on your Raid Train Express profile by default. You can turn this off at any time with the "Show Whatnot Stats" toggle in your profile settings; when off, these metrics are not shown to profile visitors. Verification status (that your username was confirmed on Whatnot) remains visible, as it is core to how the Platform identifies sellers.

Retention: Stored Whatnot metrics are deleted with your account. Short-lived lookup caches, keyed by public username rather than by your account, expire automatically.

Raid Train Express is not affiliated with, endorsed by, or operated by Whatnot Inc.

11. Security

We use industry-standard encryption (TLS), row-level security, and access controls. No system is 100% secure; we cannot guarantee absolute security.

12. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this policy with notice via email or in-app notification. Changes take effect upon posting.

14. Contact

Privacy questions? Contact us at privacy@raidtrainexpress.com.