Privacy Policy

Who we are

Ellis Hall III, operating as Rights Ready, is the sole proprietor responsible for this website and application. This policy explains how we handle information when you visit musicrightsready.com, use Rights Ready or contact us.

Rights Ready helps independent artists, songwriters, producers, managers and small labels organize music and rights information. Our initial private beta is for people in the United States who are 18 or older. We do not claim to independently verify every visitor's age or location.

For privacy questions or requests, email privacy@musicrightsready.com. Contact us if you believe a child has provided personal information through the service.

Information we collect

We receive information from you, authorized collaborators and representatives, service providers, and your use of the service. This includes:

• Account information: email address, display name, sign-in information, workspace membership, permissions and preferences.
• Music and rights information: artists, contributors, credits, works, recordings, releases, identifiers, ownership statements, splits, agreements, notes, evidence and rights-related tasks. Someone may provide collaborator information even if that person has no account.
• Creative material: uploaded audio, artwork, documents and lyrics, together with file details. These materials may contain voices, images, signatures or confidential information.
• Analysis and conversations: fingerprints, recognition results, AI-generated and corrected lyrics, Assistant messages, saved context and records of supported catalog changes.
• Technical and contact information: IP addresses, browser and device information, authentication and service logs, and messages or attachments you send us.

Please provide only material you are authorized to use and share. Do not upload passwords, payment credentials, unnecessary identification documents or unrelated sensitive information.

How we use information

We use information to provide accounts and workspaces; organize catalogs and rights records; perform requested analysis; support collaboration; respond to requests; protect the service; and maintain and improve its reliability. We send account and security messages as needed. Product updates are a separate choice.

Recognition and AI results are evidence or suggestions, not proof of ownership, authorization or registration. Please review results before relying on them.

Creative material, AI and recognition

External AI processing through the application's lyrics-analysis feature is currently disabled. Saved lyrics and manual editing remain available. This restriction does not erase information previously processed by a provider.

Catalog organization and manual editing of saved lyrics are separate from external AI processing. Unpublished-lyric web search is disabled during private beta. AI transcription, Assistant generation and external recording recognition are subject to server-side controls and may be unavailable. An integration listed in this policy does not mean that provider is currently active. Recognition results are evidence of a possible recording match, not proof of ownership.

When enabled, an audio-analysis feature may send prepared audio to a recognition or transcription provider as part of the selected workflow. Recognition uses excerpts; transcription may use longer audio segments. Assistant requests may include relevant catalog information, notes, conversation history and saved context, not just your latest message. We save relevant results and conversation information in your workspace.

External web searching of unpublished lyrics is disabled throughout private beta. Transcription is a separate feature subject to the provider controls described here; the search restriction does not itself authorize or enable transcription. You can use unrelated catalog features and manually edit lyrics without requesting new external analysis.

Server-side controls govern which providers can receive content. These administrative controls are not a universal personal opt-out. Disabling future processing does not recall information already sent.

Information sent during earlier use of a feature may remain with its provider under applicable retention rules, even if that feature is later disabled. We do not promise that historical provider records have been erased.

Rights Ready does not authorize training on users' creative content or opt that content into voluntary training programs. Provider terms and settings must support that commitment before the relevant processing is enabled. Training restrictions do not mean a provider retains no information.

The following describes integration capabilities, not a statement that every provider is currently active or fully verified. New processing depends on the selected feature and server-side controls. Historical-processing disclosures apply where information was previously sent to a provider. Our integrations include:

• OpenAI, for enabled transcription and Assistant features. Its API policy excludes training by default unless a customer opts in. Separate safety and feature-related retention may apply; we do not promise zero retention.
• AudD, for recording recognition. Its retention and service-improvement terms require clarification; we do not claim a blanket no-training or zero-retention guarantee. Compatibility with our training commitment must be resolved before enabling that processing.
• ACRCloud, for recognition and associated metadata. Its published terms prohibit model training on customer content and customer-specific derived data. Raw audio is processed temporarily, but fingerprints, results and service records may remain. Individual Identification API records cannot ordinarily be selectively deleted while the account remains active.

See OpenAI's data controls, AudD's terms and ACRCloud's terms for their practices. Their separate policies do not replace our responsibilities to you.

Uploaded evidence documents are stored with access permissions. Their text-reading feature requires separate permission and is not connected to external document AI. Content you copy into Assistant chat is processed as chat content.

When information is shared

Authorized workspace members may see information according to their permissions. A shared workspace is not private to its uploader alone.

We use Vercel for hosting, Supabase for accounts, databases and uploaded files, the AI and recognition providers above for enabled features, GitHub and Cloudflare R2 for encrypted database backup operations, and Resend, Cloudflare Email Routing and Gmail for service email and correspondence. Recognition providers may return metadata or links associated with Spotify and other music services. This does not mean Rights Ready connects to your Spotify account or offers a direct Spotify integration. If you follow an external link, that service handles your visit under its own practices.

We may disclose information when reasonably necessary to meet legal obligations, respond to lawful requests, protect rights or safety, investigate misuse, or carry out a business transfer with appropriate safeguards and any required notice.

We do not sell personal information or use it for cross-context behavioral advertising. Uploading music is not permission to sell your information or target advertising to you.

Cookies and communications

We use cookies and browser storage for sign-in, security, appearance preferences and saving progress. Rights Check progress may remain in browser storage for up to 24 hours. Blocking necessary cookies can affect sign-in and other features.

The current application does not use advertising trackers or a third-party behavioral analytics service. Hosting and security providers still process technical logs. We do not currently change site behavior in response to Do Not Track signals. Applicable legally required opt-out signals and rights must still be honored.

You can change your product-update preference or ask us to stop optional updates. Essential account and security messages may continue.

How long information remains

We retain information for the account, catalog and service purposes described here, taking account of requests, collaboration, security, legal duties and recovery needs. Logging out or stopping use does not delete an account.

Temporary analysis audio is marked to expire after seven days unless added to the catalog. Access expiry is not physical deletion. Automatic physical cleanup is currently paused, so expired files can remain stored. We do not promise seven-day physical erasure or immediate cancellation of every previously issued file link.

Catalog audio follows the selected retention approach. If an original is to be removed while keeping a listening reference, the reference must first be successfully stored. Removing an original does not automatically remove its reference, transcript, fingerprint, analysis or catalog record. File-removal requests may require separate cleanup after an item disappears from the interface.

Encrypted database backups keep seven daily and four weekly recovery points. These are counts, not guaranteed erasure deadlines: older copies may remain during backup interruptions, and separate recovery copies may have different lifetimes. Deleted database information can remain in restricted backups. Our recovery procedure requires reapplying completed deletions and access restrictions before restored service access resumes. Database backups do not include uploaded file bytes stored separately; keep your own copies of important material.

Provider retention and deletion limits may differ, including those described above.

Here is a summary of how retention works today. Access expiry, removal from your workspace, deletion of stored files and expiry of backup copies are different steps. We do not promise a fixed physical-deletion deadline.

Your requests and choices

Email privacy@musicrightsready.com to request access, correction, an export, account removal, or removal of private content and uploaded files. During beta, each request requires identity and authority verification and case review before secure manual fulfillment. We arrange secure delivery of approved exports. There is no complete self-service account-deletion or export tool.

We verify identity and authority using information proportionate to the request. Please identify the account or workspace, but do not send passwords or unnecessary identification documents. An email alone does not immediately delete an account.

We preserve legitimate shared collaborator records while minimizing the departing user's personal information. Shared records are not a blanket exception for unrelated private content. Other people's rights, specific legal obligations, disputes, security needs and provider limitations may affect fulfillment. Requests may be fulfilled in part or subject to legitimate exceptions and additional cleanup. We explain material limitations and distinguish completed removal from pending cleanup, subject to legal and security restrictions. We do not promise immediate or universal erasure.

Depending on applicable U.S. state law, you may have rights to access, correct, delete or receive a portable copy of information; opt out of certain advertising, sale, sharing or profiling; and appeal a decision. California law may also provide rights to limit certain sensitive-information uses and protection against discrimination. Applicability depends on the law and circumstances.

You or an authorized agent can contact our privacy address. We may verify the agent's authority. To request review or appeal, reply to our response and explain your concern. We will honor applicable rights and deadlines and will not unlawfully discriminate against you for exercising them.

Security and processing locations

We use authentication, workspace access controls, private storage and encrypted database backups. The service is not end-to-end encrypted: relevant application systems and providers need access to perform their functions.

No system is completely secure. Protect your account and consider who can access your workspace. Temporary file links may work until expiry, and downloaded copies cannot be recalled. Ordinary email is not a secure vault for sensitive documents.

Providers may process information outside the United States. The U.S.-only beta restriction is an eligibility rule, not a promise of U.S.-only data storage.

Changes and contact

The effective date identifies the current version. For material changes, we will provide appropriate notice through the service or account email, including any additional notice or consent required by law.

Contact Ellis Hall III, operating as Rights Ready, at privacy@musicrightsready.com.