Effective date: February 2026
This Privacy Policy describes how OSRR — Over Seas Rights & Royalties (operating at osrrglobal.com) collects, uses, and safeguards information you provide when using the Service.
OSRR collects: (a) account information you submit (email, password hash, name, country, role); (b) payment metadata (Stripe session and transaction IDs — OSRR does not store card numbers); (c) limited usage data necessary for delivering the Service; and (d) optional profile fields you choose to share.
Submitted information is used to authenticate you, deliver the directory and translation features, process the one-time $2 Complete Access payment, and respond to your enquiries. We do not sell or rent personal information.
OSRR uses HTTP-only session cookies to maintain authentication. These cookies are essential and contain no advertising trackers. Third-party services embedded into the Service (Stripe, Google Translate, logo image services) may set their own cookies governed by their own privacy policies.
Text submitted to the Translation Hub is transmitted to a third-party AI translation provider for the sole purpose of producing the translated output. Submitted text is not stored permanently by OSRR. Do not paste highly confidential material if doing so violates your own confidentiality obligations.
Payments are processed exclusively by Stripe, Inc. Card data is collected and handled directly by Stripe and is governed by Stripe's privacy policy. OSRR stores only the resulting session identifier, transaction status, and timestamp.
Account data is retained for as long as the account is active. You may request deletion of your account and associated personal data by emailing registry@osrrglobal.com.
OSRR serves users worldwide. By using the Service you understand that your data may be processed in jurisdictions whose data-protection laws differ from your home country, including the United States.
OSRR is intended for music-industry professionals and is not directed to children under the age of 16. We do not knowingly collect personal information from children.
Passwords are hashed using industry-standard bcrypt. Authentication tokens use signed JWTs. Reasonable administrative, technical, and physical safeguards are employed; however, no internet service can be guaranteed 100% secure.
Depending on your jurisdiction (GDPR, CCPA, UK GDPR, etc.) you may have rights to access, correct, port, restrict, or delete your personal information. To exercise any such right, email registry@osrrglobal.com.
Updates will be posted at osrrglobal.com/privacy. Continued use of the Service after updates indicates acceptance of the revised policy.
Privacy-related correspondence: registry@osrrglobal.com or by mail to Over Seas Rights & Royalties, 1624 S. Hope St. STE 301, Los Angeles, CA 90015, United States.
