Privacy Policy

RightsOS ("we," "us," or "our") operates the RightsOS platform at rightsos.ai — the system of record for commercial rights across sponsorship, media, licensing, music, NIL, data, and IP. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

Account information: When you sign up, we collect your email address and organization name.

Profile information: Role (brand or rights-holder), industry, and organization details you provide during onboarding.

Inventory and deal data: Partnership assets, pricing, deal terms, and related business data you enter into the platform.

Usage data: Pages visited, features used, and actions taken within the platform (used to improve the product).

Communications: Messages and proposals exchanged through the platform's deal workflow.

We use your information to:

• Provide and operate the RightsOS platform
• Match rights-holders with relevant brand partners
• Generate AI-powered benchmarks and renewal intelligence
• Send transactional emails (deal alerts, proposals, renewal reminders)
• Improve the platform and develop new features
• Comply with legal obligations

We do not sell your personal information to third parties.

Within a deal: When a brand expresses interest in your inventory item, your organization name and asset details are shared with that brand. When you send a proposal, the terms are shared with the receiving party.

Service providers: We share data with the sub-processors listed in Section 12 solely to operate the platform. Each is bound by a data processing agreement (DPA). See Section 12 for the full list.

Anonymised benchmarks (opt-in): If you choose to contribute to the RightsOS benchmark network, only category-level aggregate data is shared — no individual deal amounts, company names, or contact information.

We implement industry-standard security measures including row-level security at the database layer, encrypted connections (TLS), and server-side session management. All sensitive credentials are stored in encrypted environment variables and never committed to source code.

Despite these measures, no internet transmission is 100% secure. We encourage you to use a strong password and keep your credentials confidential.

We retain different categories of data for different periods based on the legal basis for processing. The full schedule is documented in our Data Retention Policy. Key retention periods:

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability

To exercise any of these rights, contact us at privacy@rightsos.ai.

We use strictly necessary cookies for authentication (session management). We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required.

RightsOS is not directed at children under 18. We do not knowingly collect personal information from minors.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at privacy@rightsos.ai.

We use the following sub-processors to operate the platform. Each is bound by a Data Processing Agreement (DPA). None retain personal data beyond the purpose for which it was shared.