Privacy Policy

Proyalties (“we”, “us”, “our”) operates the royalty statement consolidation service available at proyalties.com. We are the data controller for personal data processed through this service.

Contact: [email protected]

Account data

• Email address — required to create and secure your account.
• Password — stored as a salted cryptographic hash; we cannot read it.
• Analytics consent preference — a boolean flag recording whether you have opted in to allow your royalty data to be included anonymously in platform-wide trend analysis. This is off by default. If you opt in, we also store the UTC timestamp of that consent. You can change this preference at any time from Settings → Data & privacy.

Royalty statement data (parsed)

When you upload a statement file, we extract and store the structured royalty data it contains — work titles, royalty amounts, performance counts, periods, and the name of the collecting society. This is the core service: consolidating that data across societies into one view.

We do not store your original statement files. Files are read into memory, parsed, and immediately discarded. Only the extracted data fields are written to the database.

Usage data

• A language preference cookie (pro-lang) storing your UI language choice (en/ja). No expiry set; cleared when you clear cookies.
• A session cookie used to keep you logged in. This is a strictly necessary cookie — the service cannot function without it.
• We do not use analytics cookies, advertising cookies, or any third-party tracking.

We process your data under the following legal bases:

• Contract performance — processing your account data and uploaded statement data is necessary to provide the service you signed up for.
• Legitimate interests — keeping server logs for security and debugging, and maintaining the integrity of your account.
• Consent— storing your language preference cookie; and, where you have explicitly opted in, including your royalty data in anonymised platform-wide aggregations (Article 6(1)(a) GDPR). This consent is freely given, specific, and fully revocable at any time from Settings → Data & privacy.

• To provide and display your royalty dashboard, tracks, networks, and statements views.
• To authenticate your account and protect it from unauthorised access.
• To send transactional emails — account verification and security notices only. No marketing without separate consent.
• Where you have opted in to analytics: to produce anonymised, aggregated statistics about royalty trends across opted-in users — such as aggregate totals by collecting society or territory — and to display those statistics within the platform. No individual records, earnings, work titles, or identities are ever disclosed; aggregates are only produced and surfaced when the contributing group is large enough that no individual user can be identified from the result.

Withdrawing analytics consent stops your data from being included in future aggregations. It does not alter aggregates already computed — but this is a privacy guarantee, not a limitation: once your data is merged into a statistic, your contribution is irreversibly combined with others' and can no longer be isolated or attributed to you. The merged result is anonymous statistical data, not personal data; there is nothing remaining to extract or remove.

We do not sell, rent, or share your data with third parties for their own purposes.

Your parsed statement data and account information are retained for as long as your account exists. You can permanently delete all your data at any time from Settings → Wipe all data, or by contacting us at [email protected] to request full account deletion.

Deletion removes all statements, placements, and your account record from our active systems immediately. However, your data may persist in encrypted offline backups for up to 12 months, after which backup snapshots containing your data are cycled out under our retention schedule (7 daily / 7 weekly / 12 four-weekly snapshots). Backup data is encrypted and not accessible for normal use — it exists solely for disaster recovery. We cannot selectively purge individual records from backup snapshots.

Your data is transmitted over HTTPS/TLS. Data at rest is protected by the encryption controls of our database infrastructure. Passwords are hashed using bcrypt and never stored in recoverable form. Statement files are never written to disk — they are processed in memory only.

This is a beta product. While we take security seriously, no system is perfectly secure. If you discover a vulnerability, please report it to [email protected] before public disclosure.

If you are in the UK or European Economic Area, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Erasure — delete all your data via Settings, or request deletion by email.
• Rectification — correct inaccurate account data (email) via Settings or by contacting us.
• Restriction — ask us to restrict processing while a complaint is resolved.
• Portability — request your parsed royalty data in a machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent (e.g. analytics opt-in), you may withdraw it at any time from Settings → Data & privacy or by contacting us. Withdrawal does not affect the lawfulness of processing before the withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (UK: ICO at ico.org.uk; EU: your country's DPA).

We use two cookies:

• Session cookie (strictly necessary) — keeps you logged in. Deleted when you sign out.
• pro-lang (preference) — remembers your language setting. No tracking, no expiry.

No third-party cookies, analytics, or advertising are used.

Your data is stored in the same region as our database infrastructure. If that region is outside your country of residence, transfers are made under appropriate safeguards (standard contractual clauses or equivalent). Contact us for specifics on data residency.

Proyalties is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We will notify registered users by email of material changes at least 14 days before they take effect. The effective date at the top of this page reflects the most recent update. Continued use after the effective date constitutes acceptance.

Data controller inquiries, right-to-erasure requests, and security reports: [email protected]