Privacy Policy

1. Scope

This Privacy Policy explains how ROMERO9 INNOVATIONS LLC (“ROMERO9,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you use the BEIN Copyright Operations Platform and related websites, creator workspace, operations console, APIs, support channels, and integrations (collectively, the “Service”).

This Policy applies to information we process as a service provider or processor for organizations that use the Service, as well as information we process for our own account administration, security, support, and product operations. Where an organization controls your data, that organization’s privacy notice and instructions may also apply.

2. Information We Collect

Account and business information

We may collect your name, work email, role, organization, login details, account preferences, support communications, and authorization records.

Content and rights information

We process the files and records you submit or instruct us to process, including videos, audio, images, text, manuscripts, AI-generation logs, prompts, training-material sources, metadata, fingerprints, rights-holder details, contracts, licenses, signatures, territory, term, revenue-share, and restriction information.

Integration and platform information

When you connect a third-party platform, we may process platform account identifiers, channel or shop identifiers, authorization scopes, access-token metadata, callback events, content IDs, claim or moderation statuses, distribution results, performance reports, and settlement information. We do not ask you to place secret credentials in public pages.

Technical and usage information

We may collect IP address, browser and device information, log data, timestamps, pages or features used, error information, security events, and approximate location inferred from an IP address.

3. How We Use Information

We use information to:

• create and administer accounts, roles, permissions, and workspaces;
• store, index, fingerprint, review, version, and retrieve copyright assets and supporting records;
• operate contracts, rights chains, distribution jobs, platform authorizations, infringement workflows, and revenue reconciliation;
• authenticate requests, encrypt sensitive fields, prevent abuse, troubleshoot incidents, and protect the Service;
• send operational notices, security alerts, support responses, and—where permitted—product communications;
• measure reliability and improve features using aggregated or de-identified information; and
• comply with law, enforce agreements, resolve disputes, and protect people and property.

4. How We Share Information

We may share information with:

• your organization, authorized users, rights holders, collaborators, and administrators;
• third-party platforms and rights organizations that you direct us to connect, such as YouTube, Meta/Facebook, TikTok, and Believe;
• cloud hosting, object storage, security, observability, email, support, and other service providers acting under our instructions;
• professional advisers, auditors, insurers, or financing and transaction counterparties subject to appropriate confidentiality obligations; and
• government authorities, courts, or other parties when required by law or reasonably necessary to protect rights, safety, or the Service.

We do not sell personal information for money. We do not disclose content to unrelated parties for their independent use unless you direct us, consent, or the disclosure is otherwise permitted by law.

5. Third-Party Integrations

Connecting an integration allows the Service to exchange information with that provider according to the scopes you approve and the instructions you give. Each provider may process data under its own privacy policy and terms. You should review those policies before connecting an account.

We store integration secrets and tokens using access controls and encryption appropriate to the risk. The user interface displays masked values where practical. You can disconnect an integration through the Service or the provider; disconnection may not delete information already received or retained under a legitimate business or legal need.

6. Cookies and Analytics

We may use essential cookies, local storage, session identifiers, and similar technologies to keep you signed in, preserve preferences, protect forms, and understand basic Service performance. We may use privacy-conscious analytics or server logs to measure reliability.

Browser settings can block or delete cookies, but some Service features may not work correctly. If we introduce non-essential analytics or advertising technologies, we will provide any notices or choices required by applicable law.

7. Retention

We retain information for as long as needed to provide the Service, maintain rights and contract records, comply with legal or accounting obligations, resolve disputes, enforce agreements, prevent abuse, and protect backups. Retention varies by data type, account instructions, legal requirements, and the status of a workspace or integration.

Organizations using the Service may set retention instructions for their Content. At the end of a service relationship, we may return or delete Content according to the applicable agreement, subject to backups, security logs, legal holds, and records we are required to keep.

8. Security

We use administrative, technical, and physical safeguards designed to protect information, including role-based access, least-privilege controls, encryption in transit, encryption for selected sensitive fields at rest, audit logs, malware scanning, backups, and incident response processes.

No service can guarantee absolute security. You are responsible for using strong credentials, limiting team permissions, protecting API secrets, and promptly reporting suspected compromise.

9. International Transfers

ROMERO9 and its service providers may process information in countries other than the country where you live or where your organization is established. Those countries may have different data-protection rules. We use contractual, technical, and organizational measures intended to protect information when it is transferred, as required by applicable law.

10. Your Choices and Rights

Depending on your location and the role of ROMERO9, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, or to withdraw consent where processing is based on consent. You may also have the right to complain to a data-protection authority.

To exercise a right, contact your organization’s administrator first when the organization controls the data. Otherwise, submit a request through the support or privacy contact associated with your account. We may need to verify your identity and may retain information where required or permitted by law.

11. Children

The Service is intended for businesses and professional users. It is not directed to children, and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided information, contact us so we can review and take appropriate action.

12. Changes and Contact

We may update this Policy as the Service, vendors, or legal requirements change. We will post the revised version and update the “Last updated” date. If a change materially affects your rights, we will provide additional notice where required.

Privacy questions and requests may be submitted to ROMERO9 INNOVATIONS LLC through the support or privacy contact channel provided with your account. Before production launch, the operator should publish a monitored privacy email, business address, and any jurisdiction-specific representative details here.