Privacy Policy — Railpointpay
This Privacy Policy explains how we collect, use, disclose, and store personal information when you visit our website, enquire about merchant checkout, use a demo or onboarding flow, or participate in a checkout session.
Product in scope: Railpointpay merchant checkout. Buyers pay fiat on a licensed payment ramp (mock ramp today; a licensed on-ramp partner (Transak) when enabled). Crypto settlement goes to the merchant-controlled wallet. The operator does not hold or custody funds, does not operate a hot wallet for settlement, and does not run an exchange on this origin. Full card primary account numbers (PAN) are not collected or stored on railpointpay.com.
Once enabled, the licensed on-ramp partner (Transak) processes the buyer's fiat payment and, under Transak's Terms of Service, delivers the digital asset to the merchant's wallet on the buyer's behalf. Railpointpay does not process the fiat payment or hold the funds.
1. Who we are
Railpointpay is an Australian merchant checkout product operated by Sebastian Garde Howard trading as Railpointpay. In plain language we:
- provide website, demo, and checkout session tooling so merchants can accept fiat via a licensed ramp and receive crypto in a wallet they control;
- orchestrate session status pages and related technical signals (including webhooks) so merchants and buyers can see payment progress;
- do not custody merchant or buyer funds;
- do not process full card PAN on this origin — card entry, if any, happens on the licensed ramp partner’s systems.
2. Personal information we collect
Depending on how you interact with us, we may collect:
| Source | Examples |
|---|---|
| Website visitors | Pages viewed, referrer, approximate location derived from IP, browser/device type, essential cookies (see §7) |
| Merchant onboarding / demo enquiries | Name, business name, role, email, phone, message content, wallet address you choose to share for settlement preview, product or use-case description |
| Checkout sessions | Session identifiers, amounts and currency chosen for the session, status timestamps, merchant reference, settlement wallet address configured for the merchant, buyer email or contact details you or the ramp supply for receipts |
| Status pages and webhooks | Technical processing of payment-state events (e.g. pending, completed, failed) delivered to merchant endpoints you configure, plus related logs needed to operate and debug those signals |
Email (partners@ / Sebastian@platformone.com.au) |
Correspondence and attachments you send |
| Ramp / infrastructure partners | Limited status and reference data returned by the licensed ramp or hosting/email providers so we can show session progress (we do not receive full PAN on this origin) |
We do not collect full cardholder PAN, CVV, or track data on Railpointpay systems. Fiat payment credentials are handled by the licensed ramp (mock today; live partner when enabled).
3. Why we collect it (purposes)
We use personal information to:
- operate and improve the website, demos, and merchant checkout product;
- respond to merchant and partner enquiries;
- create and run checkout sessions, status pages, and webhooks as technical processing;
- show settlement destination as the merchant-controlled wallet (never an operator-held balance);
- secure the service, prevent fraud or misuse, and meet legal obligations that apply to us;
- communicate about product changes, incidents, or onboarding steps you asked for.
We do not sell personal information.
4. Disclosure
We may disclose personal information to:
- Licensed fiat ramp partners — so buyers can pay and so we can receive session status (mock ramp until a live partner is enabled);
- Hosting, email, and security providers that run the website, checkout host, logging, and inbound mail (for example Mailgun for
partners@railpointpay.com); - Professional advisers (legal, accounting, compliance) under confidentiality;
- Regulators or law enforcement where required or authorised by law;
- a buyer of our business assets, subject to confidentiality and this Policy’s spirit.
Overseas disclosure may occur where a partner or vendor is located outside Australia. Where we do so, we take reasonable steps appropriate to the circumstances (contractual safeguards and partner due diligence).
Current known overseas / sub-processor services (as of 1 October 2026): email delivery and inbound routing via Mailgun (United States) for partners@railpointpay.com. Website and checkout hosting, and any live licensed ramp partner, may also process data in Australia and/or overseas — we will update this list when the stack changes.
5. Storage and security
We use reasonable technical and organisational measures appropriate to a small software checkout operator (access control, encryption in transit, least-privilege access, vendor diligence). No method of transmission or storage is perfectly secure.
Card PAN is not intended to touch railpointpay.com. Settlement crypto is sent to wallets controlled by the merchant, not held by the operator.
6. Retention
We keep personal information only as long as needed for the purposes above, and for legal, dispute, or security retention that reasonably applies to checkout and correspondence records. Enquiry-only contacts may be deleted or de-identified sooner on request, subject to legal holds.
7. Cookies and analytics
The site may use essential cookies only (security, load balancing, session continuity for demos). As of 1 October 2026 we do not use analytics cookies or third-party marketing trackers on the public product pages. You can control cookies via your browser; blocking essentials may break demos or status pages.
8. Your rights (Australia)
We handle personal information in line with Australian Privacy Principles–style expectations under the Privacy Act 1988 (Cth) and applicable state laws. You may request access to, or correction of, personal information we hold about you. Contact partners@railpointpay.com or Sebastian@platformone.com.au.
If you are unhappy with our response, you may contact the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au
Note: Some small businesses are exempt from parts of the Privacy Act. We still handle personal information carefully and aim to meet APP-style standards. If we become an APP entity (or choose to opt in), this Policy continues to apply.
9. Children
Our site and services are aimed at businesses and buyers aged 18 or over completing lawful checkout. We do not knowingly collect personal information from individuals under 18.
10. Changes
We may update this Policy by posting a new version on this page with a revised “Last updated” date. Material changes for active merchants will also be flagged by email where practicable.
11. Contact
Privacy / partners: partners@railpointpay.com
Operator email: Sebastian@platformone.com.au
Operator: Sebastian Garde Howard (ABN 21 742 212 116) trading as Railpointpay
Address for notices: Main business location as recorded on the ABR — VIC 3073, Australia (street not published on ABR). Email: partners@railpointpay.com