Legal
Privacy Policy
RightsMasterVault exists to protect what artists own: their masters, their splits, their contracts, and the royalties owed to them. This policy explains what we collect, why, how we protect it, and the control you keep over it.
1. Who we are
This policy covers the RightsMasterVault website at rightsmastervault.com, our early-access program, and the RightsMasterVault platform as it becomes available (together, the "Service"). "We," "us," and "our" mean RightsMasterVault. For any privacy question, email calentefrederick@rightsmastervault.com.
2. Information we collect
When you request early access
- Your name and email address, so we can contact you.
- Your role (for example artist, songwriter, producer, manager, label, or publisher), so we understand who the Service should serve first.
Submitting the form is optional. We don't ask for payment details, catalog information, or documents on this website.
When you visit the website
- Standard request logs, such as IP address, browser type, and pages requested. These are created automatically by our hosting provider when any website is served, and are used for security and reliability.
- Font requests. The site loads its typefaces from Google Fonts, which receives your IP address when your browser requests them.
The website does not use analytics, advertising pixels, or tracking cookies.
When you use the platform
As accounts open, the platform will handle the information you choose to store in it:
- Account information: your email address and password, and a two-factor authentication secret if you turn that on.
- Catalog and rights data: titles, identifiers such as ISRC and ISWC, ownership splits, and collaborator or payee details you enter.
- Contracts and documents you upload to your vault.
- Royalty and earnings data from statements you import, and the history built from them.
- Security records: sign-in session data and an activity log of significant account actions, such as edits to splits or document access.
3. How we use your information
- To contact you about early access and the launch of the Service.
- To run, secure, and improve the website and the Service.
- To store and display your catalog, contracts, and royalty records when you use the platform.
- To keep accounts secure, including two-factor verification and activity logging.
- To power protective features, such as flagging uncollected royalties, duplicate registrations, or splits changed after an agreement was filed.
- To send essential account email, such as password resets.
- To meet legal obligations and protect the rights of our users and the Service.
We do not sell or rent your personal information, we do not share it for cross-site advertising, and we never use your catalog, contracts, or royalty data for advertising.
4. How we protect your information
Protecting rights data is the reason the Service exists. The website is served only over HTTPS, and early-access requests are sent over an encrypted connection to our form provider. The platform is built with:
- Vault encryption: uploaded contracts and sensitive documents are encrypted at rest using AES-256-GCM.
- Password protection: passwords are stored only as one-way bcrypt hashes, never in readable form.
- Two-factor authentication as an added layer of sign-in security.
- Encryption in transit for all traffic over HTTPS/TLS.
- Activity logging so changes can be traced and unusual activity detected.
- Access separation: production data is kept apart from demonstration data, and system access is limited to what is needed to operate the Service.
No online service can promise perfect security, but we design and operate RightsMasterVault to keep your information confidential and intact.
5. Service providers
We use a small set of providers to run the Service. They process information only to provide their service to us.
| Provider | Purpose |
|---|---|
| Render | Hosting the website and application |
| Formspree | Receiving and storing early-access requests |
| Google Fonts | Delivering the website's typefaces |
| Database hosting | Storing platform account and catalog data |
| Email delivery | Sending account email such as password resets |
We may also disclose information if required by law, to enforce our terms, or to protect the safety and rights of our users and the Service.
6. How long we keep it
We keep early-access details until the early-access program ends or until you ask us to remove them, whichever comes first. Platform data is kept while your account is active. If you close your account, we delete or de-identify your personal information within a reasonable period, except where we must keep certain records for legal, tax, or security reasons. Backup copies are removed on our regular backup cycle.
7. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct information that is wrong.
- Delete your information, including removing yourself from the early-access list.
- Export your catalog, contracts, and royalty records from the platform.
- Withdraw consent or object to certain processing.
To make a request, email calentefrederick@rightsmastervault.com. We won't treat you differently for using these rights, and we'll respond within the time required by applicable law.
8. Cookies and Do Not Track
This website does not set cookies. The platform uses only the cookies and local storage needed to keep you signed in and to run core features, with no advertising or cross-site tracking cookies. Because we don't track visitors across other websites, we treat every visitor the same way whether or not their browser sends a Do Not Track signal.
9. International visitors
The Service is operated from the United States, and information is stored with providers in the United States. If you use the Service from outside the U.S., your information will be processed there, where data-protection laws may differ from those in your country.
10. Children
The Service is meant for adults working in music and is not directed to children under 16. We don't knowingly collect information from children. If you believe a child has sent us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the Service grows or as the law requires. When we make material changes, we'll update the effective date above and, where appropriate, notify people on the early-access list or account holders by email.
12. Contact us
Questions, requests, or concerns about this policy or your information:
RightsMasterVault
calentefrederick@rightsmastervault.com