RailQuick Private Limited • Built with Bank-Grade Security for Every Train Passenger
Last Updated:October 2026
1. Our Commitment to Safety & Trust
At RailQuick Private Limited ("RailQuick", "Company", "we", "our"), passenger safety, payment integrity, and data protection are foundational. Delivering essential items to passengers inside moving trains requires rigorous digital security combined with verified physical protocols. This Security Policy outlines the technical and operational safeguards implemented across our platform.
2. Payment & Financial Transaction Security
All financial transactions on RailQuick are processed through Reserve Bank of India (RBI) authorized and PCI-DSS Level 1 certified payment gateways.
Zero Card Storage: RailQuick never stores, handles, or caches your credit card numbers, debit card details, CVVs, or NetBanking credentials on our servers.
Encrypted UPI Processing: UPI transactions are routed through NPCI-authorized secure intent flows, ensuring two-factor PIN verification on your native UPI app.
Automated Instant Refunds: If a scheduled station halt handoff cannot be fulfilled due to unforeseen train delays or rescheduling, refunds are processed instantly via automated webhook reconciliations.
3. PNR & Passenger Travel Confidentiality
We believe your journey plans belong strictly to you. RailQuick enforces a strict zero-surveillance policy:
No PNR Data Brokering: We never sell, rent, monetize, or share passenger PNR numbers, coach numbers, or travel itineraries with third-party advertisers or brokers.
Automated Telemetry Purge: Live train telemetry lookups and PNR coach verification data are kept only for the duration of the active delivery window and purged systematically post-journey.
DPDP Act Compliance: All passenger records comply with the Digital Personal Data Protection (DPDP) Act, 2023, giving passengers the absolute right to erasure.
4. Station Runner & Berth Delivery Protocols
Physical security at railway platforms and coach doorways is strictly governed:
Police & Background Verification
Every station delivery runner undergoes government photo ID and criminal background checks before receiving platform authorization badges.
Tamper-Evident Packaging
Medicines, drinking water bottles, and travel essentials are handed over in sealed, tamper-evident security packaging with printed serial seals.
Berth Handoff Verification
Deliveries are handed over strictly at the coach door / berth matching the confirmed passenger PNR or order token to prevent misplacement.
Zero Platform Disruption
Runners adhere strictly to Railway Protection Force (RPF) platform regulations, ensuring smooth passenger movement and train departures.
5. Infrastructure, Encryption & Cloud Safeguards
RailQuick infrastructure is hosted on ISO 27001, SOC 2 Type II compliant cloud providers with continuous automated security audits:
End-to-End Encryption: All platform traffic is encrypted in transit using TLS 1.3 with HSTS (HTTP Strict Transport Security) and encrypted at rest with AES-256.
DDoS & Bot Protection: High-capacity edge web application firewalls (WAF) inspect requests to mitigate brute-force and scraping attempts.
Role-Based Access Control (RBAC): Internal access to support consoles operates under strict least-privilege principles with mandatory multi-factor authentication (MFA).
6. Vulnerability Disclosure & Bug Reporting
We welcome responsible disclosures from ethical security researchers. If you identify a potential security vulnerability across RailQuick systems, please notify our security response team: