Privacy
Privacy Policy – IndianTrainSim (ITS)
IndianTrainSim.com (“ITS”, “we”, “our”, “us”) respects your privacy and is committed to protecting personal data in compliance with applicable global data protection laws, including the EU General Data Protection Regulation (GDPR), UK GDPR, and applicable Indian data protection laws such as the Digital Personal Data Protection Act, 2023 (India).
This Privacy Policy explains how data is collected, used, stored, and safeguarded when you access IndianTrainSim.com or use the ITS Windows Application (“ITS App”).
1. Definitions
ITS / Website
IndianTrainSim.com
ITS App / Windows App
IndianTrainSim Windows Application
User / Customer
Any individual accessing or using our website or app
User’s System
The computer system on which the ITS App is installed
Personal Data
Any information that can identify or relate to an individual or their device
2. Categories of Data We Collect
The ITS App collects limited technical and system-related data strictly necessary for product delivery, licensing, platform enforcement, and security purposes, including:
Computer brand and model
Graphics card information
Installed RAM capacity
HDD/SSD names and serial identifiers
Railworks installation and add-on integrity data
These data elements may be considered personal data under GDPR and Indian law when they can be linked to an identifiable user or device.
3. Purpose of Data Processing
We process collected data only for the following purposes:
License validation and anti-piracy enforcement
Secure delivery of purchased add-ons and updates
System compatibility and platform verification
Fraud prevention and misuse detection
Ensuring proper functionality of routes, scenarios, sounds, and textures
Enforcement of platform rules under the Terms & Conditions and EULA
The ITS App must be installed and run at least once to complete mandatory system verification before purchases can be completed.
4. Lawful Basis for Processing
We process personal data under the following lawful bases:
Performance of a contract – to deliver purchased digital content
User consent – provided during account creation, login, or acceptance of platform terms
Legitimate interests – to protect against piracy, fraud, unauthorized distribution, and platform misuse
Legal obligations – where required by applicable laws
Users may withdraw consent for data processing by contacting us as described in Section 13. Withdrawal of consent may affect the ability to access licensed products or services.
5. Automated Processing & Periodic Scans
The ITS App performs automated, limited-scope scans to verify:
Add-on integrity
Installation validity
Compatibility and updates
Automated scans performed by the ITS App are strictly limited in scope.
These scans do not access personal files, documents, media, or unrelated system locations.
Scanning is confined exclusively to:
Railworks / Train Simulator installation directories
Licensing-related folders created by the ITS App itself for validation and security purposes
No data outside these defined directories is accessed, read, or processed.
6. Data Storage & Security
Collected data is stored securely on our servers using appropriate technical and organizational safeguards, including:
Secure transmission channels
Strict access control mechanisms
Protection against unauthorized access, alteration, or misuse
Access to personal and system-related data is restricted exclusively to a single authorized administrator of IndianTrainSim.
No other staff members, creators, third-party sellers, contractors, or external parties are permitted to access this data under any circumstances.
Administrative access is granted solely for the purposes of:
License enforcement
Fraud and piracy prevention
System and platform verification
Legal and compliance obligations
While IndianTrainSim takes reasonable and proportionate measures to safeguard personal data, no system can be guaranteed to be completely secure, and users acknowledge this inherent risk.
7. Data Retention
Personal and system-related data is retained only for as long as necessary to:
Maintain account access
Enforce licensing and platform rules
Prevent fraud and misuse
Retention periods may vary depending on legal, technical, or security requirements.
8. Data Deletion & Account Removal
Users may request account deletion through the account management features provided by IndianTrainSim or through official support channels.
Upon approval of a deletion request, IndianTrainSim will delete, anonymize, or otherwise process personal data associated with the account in accordance with applicable laws, platform requirements, and internal policies.
IndianTrainSim can only delete or modify data that is stored on systems owned, operated, or directly controlled by IndianTrainSim.
Data stored, processed, or retained by independent third-party service providers remains subject to the policies and practices of those providers.
Certain records may be retained where reasonably necessary for security, fraud prevention, abuse prevention, platform enforcement, dispute resolution, legal compliance, audit requirements, or protection of IndianTrainSim, its creators, users, products, and services.
Support tickets, audit records, and historical transaction records may remain in anonymized, de-identified, or restricted forms where appropriate.
Security logs may be retained for a limited period before automatic removal in accordance with operational and security requirements.
9. User Rights
Where applicable under GDPR, the DPDP Act, and other data protection laws, users may have the right to:
Request access to their personal data
Request correction of inaccurate data
Object to certain processing activities
Rights related to data erasure, restriction, and portability will become fully exercisable once deletion mechanisms are implemented.
10. Third-Party Services & Analytics
IndianTrainSim may use trusted third-party service providers to operate, improve, secure, and deliver its services.
These providers may include, but are not limited to:
- • Google (including email, analytics, and related services)
• Microsoft (including analytics, cloud, and related services)
• SMSHubIndia (including SMS delivery services)
• Other service providers, infrastructure providers, analytics providers, payment processors, or communication platforms used by IndianTrainSim from time to time.
Each third-party provider operates under its own privacy policy, terms, retention practices, and data handling procedures.
Users are encouraged to review the privacy policies and terms of any third-party services they interact with.
IndianTrainSim does not control and is not responsible for the privacy practices, retention periods, security measures, or processing activities of independent third-party providers.
Where account deletion or data removal is requested, IndianTrainSim can only delete, anonymize, or modify data that is stored on systems owned, operated, or directly controlled by IndianTrainSim and for which IndianTrainSim has the authority to manage.
Data processed, stored, retained, or controlled by independent third-party providers remains subject to the policies and practices of those respective providers.
11. Children’s Privacy & Age Clarification
The base simulation game (Train Simulator Classic / RailWorks) and ITS free content are not age-restricted and may be accessed by users of any age.
However:
Users must be at least 18 years of age (or the age of legal majority in their jurisdiction) to make purchases or enter into binding transactions on IndianTrainSim.
Users below this age may access free content or play the base game but must obtain parental or legal guardian consent for account creation, purchases, or paid services.
IndianTrainSim does not knowingly collect personal data from children without appropriate consent.
12. Policy Updates
This Privacy Policy may be updated periodically to reflect legal, technical, or operational changes.
Continued use of our website or ITS App constitutes acceptance of the updated policy.
13. Contact & Grievance Redressal
For privacy-related inquiries, consent withdrawal, or data protection grievances, please contact:
This contact serves as the official grievance and privacy redress mechanism under applicable data protection laws. Reasonable efforts will be made to respond to verified requests within a reasonable timeframe.