RHYME ROYAL — Privacy Policy

Version 1.2

This policy explains what Rhyme Royal collects, why, and what you can do about it. Rhyme Royal is operated by Giuseppe Di Salvatore, carrying on business as Lone Ones Music Group, in British Columbia, Canada.

Questions or requests: support@rhymeroyal.com

1. What We Collect

You give us:

Account details — email address, handle, display name, password (stored hashed; we never see it).
Profile content — avatar, bio, links, and anything else you add.
Uploads — your verses, and beats if you are a producer.
Producer details — legal name, country, and store links, if you register as a producer.
Support messages you send us.

Created by using the platform:

Battles, votes, comments, chat messages, and Royal Rating history.
Agreement records — when you accept terms, we store the version, timestamp, IP address, and browser user agent as proof of acceptance.
Vote integrity data — when you vote, we store a one-way scrambled code derived from your IP address and browser. We do not store the IP address itself with your vote, and the code cannot be turned back into it. It exists solely so we can detect coordinated voting — several accounts operated by one person, or a group agreeing to vote for each other. It is never used for advertising or tracking you around the internet, and it is visible only to us.
Basic technical data — IP address, browser type, and pages requested, through standard server logs.

From payment:

If you buy Royal Pro or Founding Royal, Stripe processes the payment. We receive a customer reference, subscription status, and renewal date. We never receive or store your full card number.

2. Why We Use It

To run your account and the platform.
To display battles, votes, rankings, and profiles.
To process payments and manage subscriptions.
To send service email — password resets, account confirmations, and notices such as beat review decisions.
To prevent fraud, vote manipulation, and abuse.
To meet legal and accounting obligations.

We do not sell your personal information. We do not run third-party advertising networks on Rhyme Royal.

We do not use your uploads to train generative AI models, and we do not license them to anyone else for that purpose.

3. What Is Public

Rhyme Royal is a public platform. The following are visible to anyone:

your handle, display name, avatar, bio, and links;
your battles, verses, and lyrics you post;
your Royal Rating, record, and ranking;
your comments and Lounge messages;
your votes — the battle page shows who voted and which side they backed;
producer pages and beats.

Private: your email address, your direct messages, your payment details, your agreement records, and vote integrity data.

Votes are public in the sense above — the battle page shows who voted and which side they backed. How much a vote counts toward the final result may vary: we reduce the weight of votes that show signs of coordination or manipulation. We do not disclose which votes were affected, because doing so would tell someone gaming the system exactly what to change.

Direct messages are private between sender and recipient and enforced at the database level — but they are not end-to-end encrypted, and we can access them if required to investigate abuse or comply with the law.

4. Who We Share It With

Only the services needed to operate:

Supabase — database, authentication, and file storage.
Vercel — application hosting.
Stripe — payment processing.
Resend — transactional email delivery.
Cloudflare — DNS, and bot protection on sign-up and log-in.

Each processes data on our behalf under their own terms. We may also disclose information where legally required, or to protect the rights and safety of users.

These providers may process and store data outside Canada, including in the United States.

5. Cookies

We use cookies that are necessary for the site to work — keeping you logged in and maintaining your session. We do not use advertising or cross-site tracking cookies.

6. How Long We Keep It

Account data — while your account is open.
Battles and votes — retained after account closure where another artist took part, since removal would delete their work and others’ votes.
Agreement records — retained as long as needed to evidence the agreement.
Payment records — retained as required by tax and accounting law.
Server logs — a short rolling period.

7. Your Rights

You can:

see and edit most of your information in your profile;
request a copy of your personal information;
ask us to correct anything inaccurate;
delete your content and close your account;
withdraw consent to non-essential communications.

Email support@rhymeroyal.com and we will respond within a reasonable period. Depending on where you live, you may have additional rights under laws such as PIPEDA (Canada), the GDPR (Europe/UK), or applicable US state privacy laws.

8. Children

Rhyme Royal is not intended for children under 13. We do not knowingly collect information from anyone under 13. If you believe a child has given us information, contact us and we will delete it.

9. Security

Passwords are hashed, traffic is encrypted in transit, and access to data is restricted at the database level so users can only reach what they are entitled to. No system is perfectly secure, and we cannot guarantee absolute security.

10. Changes

We may update this policy. Material changes will be announced on the platform, and each version is archived.

Contact: support@rhymeroyal.com