Privacy Policy

Welcome to CheckMyRoyalty. We respect your privacy and process personal data carefully, transparently, and in accordance with the General Data Protection Regulation (GDPR).

This Privacy Policy explains what personal data we collect, why we process it, how long we retain it, and what rights you have. By using CheckMyRoyalty you agree to this Privacy Policy.

Rowan Smeets Music B.V.
Merelstraat 6, 3680 Maaseik, Belgium
Email: hello@checkmyroyalty.com
Company registration number: [TO BE COMPLETED]
VAT number: [TO BE COMPLETED]

Account data: your email address and a securely hashed password (we never store your password in plain text) for your individual account, plus a session cookie to keep you signed in. If you subscribe to a paid plan, Stripe (see section 7) holds your payment details on our behalf — we never see or store your full card number.

Uploaded documents: the contract and royalty statement PDFs you upload, and the data AI extracts from them — royalty percentages, master/publishing splits, recoupment and advance terms, territory, statement frequency, revenue and unit figures per platform, and payout amounts. These documents may contain your name, address, and payment details as included by the label or publisher who issued them.

Technical data: IP address, browser type, device type, error logs. Used solely for security, stability, and improving the Service.

CheckMyRoyalty does not knowingly process national ID numbers, identity documents, or full bank account numbers. Payments for paid plans are processed by Stripe — we never see or store your full card number.

Providing the Service: to extract contract terms, run AI contract reviews, reconcile statements against contracts, compute rate benchmarks, and generate reminders and dashboards.

Security: to prevent fraud, abuse, and unauthorized access.

Legal obligations: where we are legally required to retain or provide data.

We process personal data on the basis of performance of a contract, legal obligation, legitimate interest, and consent (where required).

OpenAI — used for AI extraction of contract and statement data, and AI contract review, when an API key is configured. Only the document you upload is sent to OpenAI to perform this specific request.

Stripe — processes payments and stores your payment details for paid plans. We never see or store your full card number ourselves.

Resend — sends transactional emails (welcome, password reset, statement reminders, plan-limit notices) when configured. Only your email address and the relevant message content are shared with Resend to send that email.

Our processors may process personal data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are applied, such as Standard Contractual Clauses (SCCs), European Commission adequacy decisions, or other legally permitted protective measures.

After deletion of your data, personal data is removed or anonymized, unless a legal obligation requires otherwise.

We take appropriate technical and organizational measures to protect personal data, including access controls, secure cloud storage, restricted staff access, TLS encryption in transit, and monitoring for security incidents. While we take reasonable security measures, no internet service can guarantee complete security.

Under the GDPR you have rights including access, correction, deletion, restriction of processing, data portability, and objection to processing. Requests can be submitted via hello@checkmyroyalty.com. We aim to respond within one month.

CheckMyRoyalty currently uses no cookies for tracking, analytics, or advertising. Access during early access is protected using standard HTTP authentication rather than a cookie-based session. See our Cookie Policy for details.

CheckMyRoyalty is intended solely for individuals aged 18 or older. If we discover that personal data of a minor has been processed without valid consent, it will be deleted as soon as possible.

CheckMyRoyalty uses AI for contract extraction, contract review scoring, and rate comparisons. These outputs are informational only. No decisions are made that produce legal effects concerning you or similarly significantly affect you without human involvement.

Should a data breach occur that may affect your personal data, we will act in accordance with the GDPR. Where legally required, affected users and the competent supervisory authority will be informed.

If you believe CheckMyRoyalty is processing your personal data incorrectly, please contact us first. You also have the right to lodge a complaint with the competent data protection supervisory authority.

CheckMyRoyalty may amend this Privacy Policy. The most current version is always published on this page. Users will be informed of material changes.

Rowan Smeets Music B.V.
Merelstraat 6, 3680 Maaseik, Belgium
hello@checkmyroyalty.com