Privacy Policy

Roy (“we”) operates royanalyst.com. Questions: support@royanalyst.com.

1. What We Collect

When you create an account, we collect your name and email address through Clerk, our authentication provider. When you upload royalty statements, we store the files themselves and the structured data parsed from them. We also store AI-generated summaries and anomaly flags derived from your uploads.

We do not collect payment information directly — billing is handled by Stripe via Clerk. We do not have access to your full card details.

2. How We Store It

Uploaded statement files are stored in a private Supabase Storage bucket. Parsed results and account data are stored in Supabase Postgres. All data is encrypted in transit (TLS) and at rest. Authentication and session data is managed by Clerk. Billing records are managed by Stripe via Clerk.

We use Row Level Security (RLS) policies on our database so that other Roy users cannot see your data.

Email and Forwarded Statements

Roy does not currently receive email on your behalf. Uploading at royanalyst.com is the only way to add a statement, and we do not use an email-ingest provider. If we add a forward-to-Roy address in the future, we will update this policy before it launches to explain what we receive (the entire message, including headers, body, sender addresses, links and attachments), how we use it (only to find and process your statements) and which provider handles it.

Statements may contain information about other people, such as co-writers or other payees; we process it only to provide the Service to you.

Data Retention

We keep your statement files, parsed results and AI-generated summaries while your account is active. When you delete your account or ask us to delete your data, we delete them within 30 days, except records we must keep by law (such as billing records).

Staff Access

Authorized Roy personnel can access uploaded statements, parsed results and model inputs/outputs only when needed to provide support you request, debug problems, improve parsing accuracy, keep the Service secure, or comply with the law.

3. AI Processing

When you upload a royalty statement, the text content of that file is sent to the Google Gemini API for parsing and analysis. This is how Roy extracts structured data and generates plain-English summaries. The raw model response is stored in our database for debugging and quality review.

We do not use your data to train third-party models. Google's use of data submitted through the Gemini API is governed by their API terms of service. Roy does not opt in to any data sharing or training programs with Google.

4. Sharing and Third Parties

We do not sell your data. The subprocessors we use to operate Roy are:

• Supabase — database and file storage
• Vercel — website and application hosting, including server logs
• Clerk — authentication and user management
• Stripe (via Clerk) — billing and subscription management
• Google Gemini — AI parsing of uploaded statement text

Roy does not currently use an email-ingest provider. We will update this list if we add a new subprocessor. We do not share your data with any other third parties except as required by law.

5. Your Rights

You have the right to access, correct, export, or delete your data at any time. To request any of these, email us at support@royanalyst.com. We will respond within 30 days.

If you delete your account, all associated statement files and parsed results will be permanently deleted. This action cannot be undone.

6. Contact

For privacy questions or data deletion requests, contact us at support@royanalyst.com.