Privacy Policy

1. Introduction

RoyaltyFlow Inc. (“we,” “us,” “our”) respects your privacy. This policy explains how we collect, use, and protect your personal data when you use our platform.

2. Who We Are

RoyaltyFlow Inc.
1209 N Orange St, Wilmington, DE 19801, USA
Email: privacy@royaltyflow.com
We are the data controller for your personal information.

3. Information We Collect

• Account Data: Name, email, password, company name, billing address, payment info (processed by Stripe).
• Content: Audio files, split agreements, royalty reports, and track metadata.
• Usage Data: IP address, browser type, pages visited, and features used.
• Communications: Support tickets, emails, and feedback.

4. Legal Basis for Processing (GDPR)

We process your data based on: (a) your consent, (b) contract performance, (c) legal obligations, and (d) legitimate interests.

5. How We Use Your Data

• Provide and maintain our services
• Process royalty calculations and payments
• Improve and analyze platform usage
• Communicate with you about updates and support
• Comply with legal obligations

6. Data Sharing

We share data with: Stripe (payment processing), AWS (hosting), Google Analytics (usage analytics), and music distributors (DistroKid, TuneCore) per your instructions. We never sell your personal data.

7. International Data Transfers

We store data in the US and EU. For transfers outside the EEA, we use Standard Contractual Clauses (SCCs) to ensure adequate protection.

8. Data Retention

We retain your data as long as your account is active. Upon deletion, data is anonymized within 30 days, except where legal retention applies.

9. Your Rights

You have the right to: access, rectify, delete, restrict processing, data portability, object to processing, and withdraw consent. To exercise these rights, contact privacy@royaltyflow.com.

10. Delaware Personal Data Privacy Act (DPDPA) Compliance

Under Delaware law, which took effect January 1, 2025, Delaware residents have additional rights including the right to confirm processing, access, correct inaccuracies, delete, opt out of targeted advertising, and obtain a portable copy of their data. We also recognize universal opt-out mechanisms (e.g., Global Privacy Control) and limit data collection to what is adequate, relevant, and reasonably necessary.

11. Security

We implement industry-standard measures including encryption (TLS 1.3), access controls, and regular security audits.

12. Children’s Privacy

Our service is not directed to children under 16. We do not knowingly collect their data.

13. Changes to This Policy

We will notify you of material changes via email or website notice.

14. Contact Us

For privacy concerns, contact our Data Protection Officer at dpo@royaltyflow.com or 1209 N Orange St, Wilmington, DE 19801.