What we collect, why, and what you control.

Inverse Technologies, Inc. ("Inverse", "we") runs inversemusic.com and is responsible for the personal information described here. Questions or requests: hello@inversemusic.com.

• Account details. Your email address, name if you give it, and the sign-in details needed to keep your account secure.
• Files you give us. Royalty statements, contracts, works catalogs and anything else you upload or forward, plus the reports, findings and dispute drafts we produce from them. These can include names, payee IDs and earnings.
• Portal connections. If you connect a royalty portal such as ASCAP, your username and the encrypted session that lets us collect statements for you. Your password is passed once to the secure remote browser to sign in and is never stored by Inverse.
• Payments. Stripe handles card details. We receive confirmation of payment and billing details Stripe shares with us.
• Messages. Support messages, questions you ask about a report, and emails you send to your Inverse forwarding address.
• Technical information. IP address, browser and device details in server logs and error reports, a random identifier stored in your browser that protects free check results, and the referral code of a link you arrived from.

• To check your statements and produce your reports and findings.
• To send the emails you ask for or expect: results, reminders about dispute deadlines, and follow-ups on a free check.
• To file a dispute or request with a payer, only when you tell us to.
• To answer support requests and keep the service secure and free of abuse.
• To read future statements correctly. When we first see a statement format we save its layout (the column headings and structure) so the next one from that payer is read the same way. We do not reuse your figures or names to do this.
• To meet legal, tax and accounting obligations.

We do not sell or share personal information for advertising, and your files are never used to train AI models.

Every calculation is done by our own code. AI models read contracts and statement layouts and help write reports. They receive only what is needed for that task, from providers whose terms do not allow them to train on the data we send.

We share personal information only with providers that help us run Inverse:

• Lovable and Supabase. Host the website, database, sign-in and file storage.
• Stripe. Processes payments. We never see or store your full card number.
• Anthropic. AI models that read contracts and write parts of reports.
• OpenAI and Google. AI models used for some reading tasks, reached through Lovable's AI gateway.
• Mailgun. Sends our emails and receives statements you forward to your Inverse address.
• Anchor Browser and Bright Data. Run the secure remote browser that signs in to royalty portals you connect.
• Cloudflare. Bot protection (Turnstile) on sign-in and sign-up.
• Sentry. Error reports, so we can fix problems. No session recording.

We may also disclose information when the law requires it, to protect rights and safety, or as part of a merger or sale of the business, in which case this policy continues to apply.

If you are in the EU, EEA, UK or Switzerland, we process personal information to perform our contract with you (running your checks and account), for our legitimate interests (security, preventing abuse and improving how we read statements), with your consent (the optional referral cookie), and to meet legal obligations.

• Account data, files and reports: for as long as your account is open, until you delete them.
• Files from a free check that is not claimed by an account: deleted after 30 days.
• Payment and tax records: as long as the law requires.
• Server logs and error reports: kept for a limited period, then deleted.

You can export a copy of your data, or permanently delete your account and everything in it, from your account settings. You can also ask us to access, correct, restrict or stop using your personal information, or to move it to another service. Email hello@inversemusic.com. We answer within 30 days and never treat you differently for asking.

California residents have the right to know what we collect, to delete and correct it, and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.

In the EU, EEA, UK or Switzerland you may also withdraw consent at any time and complain to your local data protection authority.

We only use the cookies and browser storage needed to keep you signed in, take payments and protect your results. The one optional item is a referral cookie that records which link brought you to Inverse. Visitors in the EU, EEA, UK and Switzerland are asked first. We use no advertising or cross-site tracking, so Do Not Track signals change nothing here.

Data is encrypted in transit and at rest, and access is limited to your account. The details are on our Security & Trust page.

Inverse and most of its providers operate in the United States. When we transfer personal information from the EU, EEA, UK or Switzerland, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses.

Inverse is not meant for anyone under 16, and we do not knowingly collect their information.

If we change this policy we will update the date at the top, and tell account holders by email about material changes before they take effect.