ROYALTY LOCK

Privacy Policy

Effective date: August 6, 2026 · Last updated: August 6, 2026

The short version

1. Who we are

Royalty Lock ("Royalty Lock," "we," "us," or "our") is operated by Focus Music Entertainment, LLC, a Maryland limited liability company. This policy explains exactly what we store when you use royaltylock.io and our apps (the "Service"), why we store it, and what you can do about it. Questions: chad@royaltylock.io.

2. What we deliberately do not store

Some of this is a design decision we made on purpose. The most sensitive things in your music business simply never land in our database, so they cannot be lost, leaked, or subpoenaed from us.

3. What we actually store

This is the real inventory, table by table. Nothing here is boilerplate.

Account and identity

Your email address, full name, legal name, IPI or CAE number, PRO affiliation, and publishing path. Where you have signed an agent authorization, we also store the signer's name, the signature timestamp, and the IP address recorded at the moment of signing. Passwords for your Royalty Lock account are handled by our authentication provider and stored only as a secure hash.

Musical works and catalog

Song titles, ISWC, ISRC, UPC, distributor, release dates, and duration. For audio, we store metadata about the file and not the file itself: the filename, the SHA-256 hash, the file size, the timestamp of the hash, the acoustic fingerprint, and waveform display data.

We also store co-writer information you enter: legal name, IPI number, PRO, publisher name, and writer and publisher share percentages. Co-writer data may describe people who are not users of the Service. You are responsible for having the right to give us that information and for making sure it is accurate.

Registration and fulfillment records

The destination organization, current status, submission timestamps, confirmation references, and result notes for each registration.

Payments

Amount, tier, status, timestamps, and Stripe session and payment intent identifiers. For orders that require it, we also store your typed authorization signature and its timestamp. Payment card details are processed by Stripe and are never stored on Royalty Lock systems.

Communications

Email address, newsletter signup source, and a log of the transactional emails we have sent you.

Usage analytics

An anonymous identifier, a session identifier, the page path, referrer, and UTM campaign, medium, and source. When you are signed in, these events are associated with your user ID.

4. How we use it

5. Legal bases (EEA and UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases: performance of a contract, to provide the Service you signed up for; legitimate interests, to secure, maintain, and improve the Service; consent, for marketing email and non-essential cookies, which you can withdraw at any time; and legal obligation, for records we are required to keep.

6. Subprocessors

We use a small set of vendors, each processing data on our behalf under contract:

We do not sell your data, and we do not share it for advertising. We may disclose information when the law requires it or to protect rights and safety.

7. International transfers

We are based in the United States and we process data there. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. Where required, we use appropriate safeguards, such as standard contractual clauses, to protect that transfer.

8. Cookies

We use cookies for sign-in sessions and for basic analytics. Session cookies are necessary for the Service to work. Where the law requires it, you can control non-essential cookies, and you can also clear or block cookies in your browser settings.

9. How long we keep it

We keep your data while your account is active. You can request deletion at any time. Some payment and registration records are kept longer where we are required to retain them for legal, tax, or accounting purposes.

10. Your rights

You can access, correct, export, or delete your data. Delete your account and data in the app under Settings, then Delete account. For access, correction, or an export, email chad@royaltylock.io and we will respond within 30 days. We may need to verify your identity first.

California residents: we do not sell personal information, and we do not share it for cross-context behavioral advertising. You have the right to know what we collect, to request deletion or correction, and to opt out of sale or sharing, which does not apply here because we do neither. We will not discriminate against you for exercising any of these rights.

11. Where your data lives and how it is protected

Data is stored in the United States. It is encrypted in transit and at rest. Every database table uses row level security so your records are isolated from other users, and our privileged server keys never reach your browser or device. No system is perfect, but we hold as little as we can and protect what we hold.

12. Children

The Service is not directed at anyone under 13, and we do not knowingly collect their information. If you believe a child has given us data, contact us and we will delete it.

13. Changes

If we change this policy we will post the new version with a revised "Last updated" date, and for material changes we will notify you.

14. Contact

Privacy requests and questions: chad@royaltylock.io · Focus Music Entertainment, LLC · Maryland, USA.