Privacy · updated 2 November 2026

Your rail is yours.

What Rail keeps, why it keeps it, and how to delete all of it.

Rail (“we”) is responsible for the personal data described here under UK data protection law. Questions or requests: hello@rail.clothing.

What Rail keeps

WhatWhy
Your name and email address, from Google sign-inTo know it’s you and keep your rail private to you
Photos of your clothes, and the details Rail reads from themTo build outfits from what you own
Your brief: fit, shops, budget, style notes, height and size if you give them, and your town for the weatherTo suit suggestions to you
Photos of yourself, only if you add themTo show outfits on you
Outfits suggested, outfits you save, and your thumbs up or downSo the stylist learns what you like
Fit checks and product links you pasteTo recommend a size and keep your history
How you use Rail, such as the suggestions you openTo keep Rail working well and improve it

Rail doesn’t sell your data, show you adverts, or share your wardrobe with anyone.

Gmail import

Connecting Gmail is optional and separate from signing in. With your permission, Rail reads your mailbox read-only and looks only for clothing orders and returns from the last three years. Those emails are read automatically to find the pieces you bought, which are shown to you; Rail keeps only the pieces you tick. It doesn’t keep the emails, and never sends, changes or deletes anything in your mailbox.

Rail keeps an encrypted key so it can look again when you ask. You can disconnect on The rail at any time, or remove Rail from your Google account under Security → Third-party connections. Rail’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who else handles it

Rail uses a small number of service providers to host the site, store your data and photos securely, and provide the AI that reads photos and emails, suggests outfits and draws them. They handle your data only to provide those services, under their business terms, and some are based outside the UK, with the safeguards those terms provide.

Cookies and storage

  • Signed in: one cookie keeps you signed in, for 180 days if you tick “Stay signed in”, otherwise until you close the browser.
  • Short-lived: a few cookies last minutes while you sign in or connect Gmail, to keep those steps safe.
  • Preferences: your browser remembers small choices, such as showing outfits on a model or a mannequin.

No advertising cookies. If you follow a link to a shop, the shop, and any partner that handles the link on its way, may set its own cookies under its own privacy policy.

Keeping and deleting

Rail keeps your data while you use it. Delete everything, at the foot of Brief, removes your photos, pieces, outfits, brief, fit checks and Gmail connection straight away. To remove your account record (name and email) as well, or for a copy of your data, email hello@rail.clothing.

Your rights

You can ask to see, correct, export or delete your data, or object to how it’s used. If you’re unhappy with the answer, you can complain to the Information Commissioner’s Office (ico.org.uk).

Rail is in private beta. If anything here changes, this page changes first and the date at the top moves.

← Back to Rail