Privacy Policy | Royalti.io

Please read the following privacy policy (the "Privacy Policy") carefully before using the website www.royalti.io and any affiliated sites (individually and collectively, the "Site") to learn about how Royalti Digital Music Solutions Limited ("ROYALTI.IO," "we," "our" or "us") collects and uses your personal information.

By accessing the Site and/or the services offered by ROYALTI.IO via the Site (the "Services"), you agree and consent to the terms and practices referred in this Privacy Policy, as amended from time to time, and you hereby grant to us your prior and informed consent for the use and treatment of your information as described herein. If you do not agree to this Privacy Policy in its entirety, please do not access or use the Site or Services. Should you have any questions about the Privacy Policy, please contact [email protected].

Where required by law, ROYALTI DIGITAL MUSIC SOLUTIONS LIMITED shall be deemed the data controller or the person responsible for and in charge of the treatment or use of the Information.

Information Collected

We collect your personal and non-personal information (the "Information") in two ways:

Information that you provide; and
Information that is automatically collected.

Your provision of personal information is completely voluntary. We do not collect personal information unless you submit that information to us.

Categories of personal information we may collect include:

Identity Data, which includes name or other similar identifiers
Contact Data, which includes address, email address, and telephone numbers

We may also collect certain other types of information that, along with identity and contact data, may be considered and specifically named "personal data" in certain jurisdictions, including the European Union ("EU"), such as:

Financial Data, which includes credit card, debit card, bank account, or other payment details
Transaction Data, which includes details about payments to and from you
Technical Data, which includes internet protocol (IP) address, location data, your login data, and device and browser information
Profile Data, which includes your username and password, your album and release information, accounting statements and other reports, and preferences
Usage Data, which includes information on how you use the Site and any third party sites linked to from the Site
Social Media Data, which includes information from the social platforms where the user is registered and via which platform the user logs into our website
Marketing and Communications Data, which includes your preferences in receiving marketing from us

IF YOU ARE SITUATED IN THE EU, PLEASE SEE THE SECTION "ADDITIONAL EU DISCLOSURES" THAT PERTAINS TO OUR COLLECTION, USE AND DISCLOSURE OF YOUR PERSONAL DATA AND ADDITIONAL RIGHTS YOU HAVE UNDER APPLICABLE LAW.

We can collect additional information on you from other sources, such as social networks and digital platforms. In these cases, we may collect information related to your identity and the number of followers you have on certain social networks and digital platforms. This information may be used to confirm that you behave according to the practices and policies from social networks and to access other data published by you in order to verify the veracity of the information provided in this site, as well as to provide the services subject to this Site.

Information You Provide

To register for an account on the Site and use some of the Services, you may need to provide us with certain Information, such as your full name, age, e-mail address, mailing address, telephone number, credit card or other payment method information, billing information, URL, titles of songs and albums, artist name(s), credits and other similar information and metadata relating to songs and sound recordings, analytics, and biographical information.

Providing us with such Information is a decision that you make in a free, voluntary and independent manner. You may provide your Information by entering it as instructed in the Site, or by logging into your online account ("SMSP Account") with a social media service provider ("SMSP"), including but not limited to your Facebook, Google or LinkedIn account. You agree that by logging into these SMSP Accounts you authorize us to access to it and the Information and contents published therein, such as photographs, profile pictures, and name and location of contacts.

Furthermore, you represent that such authorization (i) does not violate the terms and conditions or the privacy policy governing the services provided to you by the SMSP; and (ii) does not cause us to pay any fee for such access.

Information Automatically Collected

We may automatically receive, collect and record information such as (i) actions and searches you perform while interacting with the Site or using the Services; (ii) Internet Protocol addresses; (iii) operating systems; (iv) the time, frequency and duration of the actions, visits and uses of the Site and Services; and (v) analytics thereof.

Cookies and Other Technologies: The Site may use cookies, a type of technology that installs a small data file on a website user's computer or other device to permit a website to, for example, recognize future visits from that computer or device. Cookies allow the Site to recognize you and tailor the Site and Services to your tracked preferences. You may limit or delete the cookies enabled by us by modifying the settings of your browser, and you may set your browser to inform you when cookies are enabled.

Internet-Based Advertising: We may engage third-party vendors to use your information in connection with their own information to deliver targeted advertising to you when you visit the Site or other websites. Cookies, described above, may be used in this process.

Clickstream Data: As you use the Internet, a trail of electronic information is left at each website you visit. This information, sometimes referred to as "clickstream data," can be collected and stored by a website's server. The Site may collect and use clickstream data as a form of aggregate information to anonymously determine how much time users spend on each page of the Site, how users navigate through the Site and how we may tailor the Site to better meet the needs of users. The information often will be used to improve the Site and Services. The collection or use of clickstream data will be anonymous and aggregated and will not intentionally contain any personal information.

Use of the Information

Subject to the section titled "Additional EU Disclosures," we use information held about you to perform the Services and for other purposes outlined below. Specifically, we use your information for a variety of purposes (the "use" or "treatment"), including:

To identify you when you use the Site and Services;
To provide, operate, improve and optimize the operation of the Site and Services;
To customize the Site and Services;
To perform under the contract we are about to enter into or have entered into with you;
To communicate with you, send you emails, technical messages, marketing campaigns messages, security alerts, updates, terms and conditions and policies updates, and notices;
To provide technical support; and
To comply with a legal or regulatory obligation.

Subject to the section titled "Additional EU Disclosures," we may also use your Information by sharing or disclosing all or part of it with certain third parties:

If it is required by the applicable law and regulations or requested by an authority such as a court, the government or law enforcement officials;
In order to investigate suspected fraud or other violations of any law, rule, regulation, or the policies of the Site;
If you are involved, directly or indirectly, in a Copyright Claim or Dispute (as defined in the Terms and Conditions of the Site);
In connection with a merger, acquisition, or corporate restructuring of ROYALTI.IO.

Third-Party Links, Social Networking Services and Digital Service Providers

The Site may include links to third-party websites, plug-ins, and applications, including but not limited to Google Services. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. For your information, Google's Privacy Policy can be accessed at https://policies.google.com/privacy, as well as Google's security settings page at https://security.google.com/settings/security/permissions, but we encourage you to search and read the privacy policy of every website you visit.

The Site may integrate with various social networking services and digital service providers. You understand that we do not control such services and are not liable for the manner in which they operate. While we may provide you with the ability to use such services in connection with the Site, we are doing so merely as an accommodation and, like you, are relying on those third party services to operate properly and fairly.

You should be aware that Information which you voluntarily include and transmit online in a publicly accessible blog, social network, or otherwise online may be viewed and used by others. We are unable to control such uses of your Information, and by using such services, you assume the risk that the Information provided by you may be viewed and used by third parties.

We can also share the Information to the following third parties:

Auditors and public authorities as required by law, such as to comply with subpoenas or similar legal processes and obligations;
When the user is an artist, label, writer or other rightsholder, we can share the Information to rights management entities for the registration and administration of your rights, financial entities to carry out financial transactions, and third-party owners of channels and digital platforms (including social networks) to carry out all acts of use and exploitation offered by said third parties, as well as the users of the mentioned channels and platforms, as main receptors of the data contained in the images, interpretations, executions, audios and videos; and
When a claim related to Copyright or any type of Intellectual Property Rights is brought to us and you are, directly or indirectly, related to it. In this case, we can decide, in our sole discretion, to share your contact information with claimant, who can reach you and notify you about your possible infringement to his rights, and jointly find a solution to the origin of the dispute.

Access, Update and Correction of the Information

You agree to immediately request us to update or correct the Information as soon as you notice that the Information provided by you or automatically collected is inaccurate or needs to be updated, rectified or deleted. You are responsible for any inaccurate or not updated Information. You may, at any time, request, regarding to your data:

Confirmation of its processing by ROYALTI.IO;
Access to your data;
Correction;
Anonymization, blocking or deletion of unnecessary or processed data in non-compliance with the local laws of your country or region;
Data portability to another provider.

By requesting any such action, you are aware and agree that:

We may retain some of this data that will be properly protected, solely and exclusively necessary for our internal use, for accounting or compliance with laws; and
The Service or Agreement you hold with us may be unfeasible, depending on the level of deletion, anonymization, blocking, or portability of data you intend. If the contract is terminated for this reason, the relevant contractual dispositions that regulate your relation with us may apply.

To make any of the requests above, please send an email to [email protected]. All notices sent to this email will be deemed received 24 hours after the email was sent, if no "system error" or other notice of non-delivery is generated. If applicable law requires that a given communication be "in writing," you agree that email communication will satisfy this requirement.

Additionally, as a user of the Site, you not only have the right of access, rectification, deletion, opposition, limitation of treatment, portability, but also, where applicable, the withdrawal of consent granted in relation to the treatments indicated in this policy based on consent (without affecting the legality of the treatment based on the consent prior to its withdrawal).

You may access your personal data (or to exercise any of the other rights) free of charge. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Data Security

We have put in place appropriate security measures to prevent information about you from being accidentally lost, used or accessed in an unauthorized way, altered, or disclosed; however, due to the inherent open nature of the Internet, we cannot ensure or warrant the security of any information provided online. We have put in place procedures to deal with any suspected data breach that will affect you and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data Retention

We will only retain your information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To determine the appropriate retention period for your Information, we consider the amount, nature, and sensitivity of the Information, the purpose for which we process your Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances you can ask us to delete your data (see Request erasure above for further information). In some circumstances we may anonymize information about you (so that it can no longer be associated with you) for research or statistical purposes in which case we may use and retain this information indefinitely without further notice to you.

Unsubscribing Choice

You may choose to opt-out or unsubscribe from emails from us with updates, newsletters, marketing campaigns and other communications, you may choose to unsubscribe from such by following the instructions contained in such emails or by sending a request to [email protected]. You may not unsubscribe from emails regarding your account with us, transactions on the Site or in connection with the Services, changes to this Privacy Policy, contracts between us and you, or similar correspondence.

You may revoke the authorization granted herein on a prospective basis by sending an email to [email protected] and ceasing all use and access of the Site and/or Services; however, we may continue to use Information received prior to such revocation or as needed for our legitimate business purposes, to perform under any contract between us and you, or for any other lawful purpose. If you resume or continue to access the Site and/or Services, your authorization will be reinstated and such access or use will be deemed your consent.

Children's Information

The Site and Services are not intended for children under the age of 13. If we become aware that a minor has provided his/her Information, we will have the right to remove or delete such information and to make our best efforts in limiting the access of the minor to the Site and Services. If the minor's parents become aware that their child is accessing the Site, using the Services and/or providing us with his/her Information, they shall immediately contact us at [email protected].

Also, as a user of the site, you guarantee that you're either 18 or under your legal representative's authorization and consent to access to any of the services hereof offered.

Additional EU Disclosures

Our role as data controller and data processor: Royalti Digital Music Solutions Limited acts as the data controller of your Information submitted through the Site. Notwithstanding this, any of ROYALTI.IO's affiliates or subsidiaries can process your Information from the moment in which you submit it on our Site. In any case, you can always resort to your local supervisory authority. However, we encourage you to contact us first at [email protected], and we will do our very best to resolve your concern.

Provision of personal data and failure to provide personal data: Where we need to collect personal data by law or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we will not be able to provide Services to you.

Legal basis for our processing of your personal data: Where we process personal data of individuals in the European Union, such processing will fall under the scope of the General Data Protection Regulation ("GDPR"). Below are the types of lawful basis that we will rely on to process your personal data:

Legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service and the best and most secure experience.
Performance of contract means processing your data as necessary to perform our obligations under any contract with you, including all actions required to fully render the Services under any contract.
With implied or express consent means processing your data based on your consent, whether express or implied by your actions.
Comply with a legal or regulatory obligation means processing your personal data where it is necessary for the compliance with a legal or regulatory obligation that we are subject.

Change of purpose: We will only use your personal data for the purposes for which we collected it, unless we reasonably consider the need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at [email protected].

Collection of personal data from third party sources: We also collect data about you from various third parties and public sources, including if you register for the Site or otherwise link to your Facebook, Twitter, Google, LinkedIn or other social media sites. Your accounting statements and reports generated in connection with the Services we provide are based on data we receive from various third party platforms.

Withdrawing your consent: If we are relying on your consent to process your personal data, you have the right to withdraw your consent at any time by contacting us at [email protected].

Use of your personal data for marketing purposes: We strive to provide you with choices regarding personal data uses, particularly around marketing and advertising. You will receive marketing communications from us if you have signed up on the Site or used the Services and have opted into receiving that marketing. We will get your opt-in consent before we share your personal data with any company outside of ROYALTI.IO for marketing purposes.

Rights of EU Data Subjects: Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to:

Request access to your personal data (commonly known as "data subject access request").
Request correction of the personal data that we hold about you.
Request erasure of your personal data.
Object to processing of your personal data where we are relying on a legitimate interest.
Request restriction of processing your personal data.
Request the transfer of your personal data to you or a third party.
Withdraw consent at any time where we are relying on consent to process your personal data.

To exercise your rights, please contact [email protected].

Nigeria Data Protection (NDPA 2023)

Royalti Digital Music Solutions Limited is incorporated in Nigeria and is subject to the Nigeria Data Protection Act 2023 ("NDPA") and the General Application and Implementation Directive ("GAID") 2025 issued by the Nigeria Data Protection Commission ("NDPC").

Data Controller: Royalti Digital Music Solutions Limited acts as the data controller for personal data collected through the Site and the Services. We determine the purposes and means of processing your personal data.

Data Protection Officer: We have designated a Data Protection Officer to oversee compliance with the NDPA and other applicable data protection laws. You may contact our DPO at [email protected].

NDPC Registration: We are committed to registering with the Nigeria Data Protection Commission as a data controller of major importance in accordance with Section 30 of the NDPA 2023 and the requirements of the GAID 2025.

Lawful Basis for Processing: Under the NDPA, we process your personal data based on one or more of the following lawful bases:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
Contractual necessity: Where processing is necessary for the performance of a contract to which you are a party, including the provision of our Services.
Legal obligation: Where processing is necessary for compliance with a legal obligation to which we are subject under Nigerian law.
Vital interest: Where processing is necessary to protect your vital interests or those of another natural person.
Legitimate interest: Where processing is necessary for the purposes of legitimate interests pursued by us or a third party, provided such interests are not overridden by your fundamental rights and freedoms.

Royalty Statement Analyzer: Our free royalty statement analyzer computes headline figures in your browser. By clicking "See the full breakdown," you consent to your royalty statement being sent to our secure processing environment to generate the full breakdown. Your royalty statement and the information generated from it are retained for no more than 72 hours before automatic deletion unless you create an account and retain the processed statement in your account. You may request earlier deletion using the delete control on your results page. You may withdraw your consent at any time. We do not use your statement or any information derived from it to train artificial-intelligence or machine-learning models. No account is required, and we do not ask for your name or email address unless you voluntarily provide them so that we can send your results.

Your Rights Under the NDPA: In addition to the rights described elsewhere in this Privacy Policy, as a data subject under the NDPA you have the right to:

Be informed about the collection and use of your personal data.
Access the personal data we hold about you and obtain a copy.
Rectify inaccurate or incomplete personal data.
Request the erasure of your personal data where there is no compelling reason for its continued processing.
Restrict or object to the processing of your personal data.
Data portability — receive your personal data in a structured, commonly used, and machine-readable format.
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with the Nigeria Data Protection Commission if you believe your data protection rights have been violated.

Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the NDPC within 72 hours of becoming aware of the breach and will notify affected data subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Data Protection Impact Assessment: We conduct Data Protection Impact Assessments where our processing activities are likely to result in a high risk to the rights and freedoms of data subjects, particularly where we process financial data such as royalty information and payment details.

International Data Transfers

Your personal data may be transferred to, stored in, and processed in countries outside of Nigeria, including the United States and European Union member states, where our service providers operate. We ensure that appropriate safeguards are in place for such transfers in compliance with the NDPA 2023 and the GDPR.

Transfer Mechanisms: For transfers of personal data from the European Union to Nigeria, we rely on Standard Contractual Clauses ("SCCs") approved by the European Commission and conduct Transfer Impact Assessments to evaluate the level of protection in the receiving country. For transfers under the NDPA, we implement contractual safeguards that ensure an adequate level of data protection as required by the Act.

Supplementary Measures: In addition to contractual safeguards, we implement technical measures including encryption of data in transit and at rest, access controls, pseudonymization where feasible, and regular security audits to supplement the protection provided by transfer mechanisms.

Sub-Processors

We use the following categories of sub-processors to help provide our Services. Each sub-processor processes personal data only as necessary for the specific purpose described and is bound by data processing agreements:

Payment Processing: Stripe (US/Global) for international payments; Verto (UK) for currency conversion services.
Cloud Infrastructure: Google Cloud Platform (US/EU) for data storage, computing, and media storage.
Email Services: Resend (US) for transactional and service emails.
Analytics: PostHog (US/EU) for product analytics; Mixpanel for usage analytics.
Customer Support: Chatwoot for live chat and support communications.

We maintain an up-to-date list of sub-processors. If we engage a new sub-processor, we will provide notice of the change. If you object to a new sub-processor, you may contact us at [email protected] to discuss your concerns.

Updates to this Privacy Policy

We reserve the right, at our discretion, to change, modify, add or remove portions of this Privacy Policy at any time. However, if at any time in the future we plan to use your information that materially differs from this Privacy Policy, we will post such changes here or email you. We encourage you to periodically review the Site for the latest information on our privacy practices. You are bound by any changes to the Privacy Policy when you use the Site and/or Services after such changes have been first posted.

Contact Us

ROYALTI DIGITAL MUSIC SOLUTIONS LIMITED
Ikeja, Lagos
[email protected]