Alex is Sprintlaw's co-founder and a legal technology leader. He holds law and media degrees from the University of Sydney and has been recognized by Australasian Lawyer, Lawyers Weekly and the Sydney Young Entrepreneur Awards for his work building Sprintlaw and improving access to business legal support.
If you paid someone to build your website or app, you might assume your business owns everything. Sometimes that's true. Often, it's only partly true.
In the United States, paying an invoice doesn't automatically transfer intellectual property rights to you. Ownership usually depends on what was created, who created it, whether they were your employee or contractor, and what your written agreement says.
The good news is that this doesn't have to be messy. Once you know what to check - code, design, content, data, accounts and handover rights - you can fix gaps before they cause problems with a developer, buyer, investor or competitor.
Who Owns The IP In A Website Or App You Paid For?
It depends, but the safest starting point is this: your business owns the IP only if the law gives it to you automatically or a written agreement transfers it to you.
For websites and apps, the most common IP right is copyright. Under the US Copyright Act, copyright generally belongs to the person or company that created the work when it's fixed in a tangible form. That can include software code, website copy, graphics, icons, photos, videos and some parts of the user interface.
There are two common exceptions that matter for your business:
- Employee work: If your employee creates website or app materials within the scope of their job, your business will usually own the copyright as a work made for hire.
- Contractor work: If an outside developer, designer, copywriter or agency creates the materials, they usually own the copyright unless there's a written IP assignment or a valid work for hire agreement.
This is where many businesses get caught out. A paid invoice might show you bought development services, but it may not show you bought the IP itself.
Say Maya runs a meal prep business and pays a freelance developer to build an ordering app. The developer writes the code, designs the dashboard and uploads the app to an account they control. Maya pays in full. If there's no written IP assignment, Maya may have an implied license to use the app for her business, but she may not have the right to copy it, modify it, sell it, move it to another developer or use it as the base for a new product.
That can be a real problem if you want to raise funding, sell your business, switch developers or stop a former contractor from reusing your code for another client.
What Parts Of A Website Or App Can Be Owned?
Different parts of your website or app can be owned in different ways, so you need to look beyond the finished product on the screen.
A website or app is usually a bundle of IP, contracts, accounts and data. Some parts are protected by copyright. Some are protected by trademark law. Some are protected mainly through confidentiality and trade secret rules. Some may not be owned as IP at all, but still need to be controlled through contracts.
Code And Technical Materials
Source code and object code can be protected by copyright. The same goes for technical documentation, architecture notes and some database structures.
If a developer wrote custom code for you, your agreement should say who owns it. If the developer reused pre-existing code, frameworks or libraries, your business may only receive a license to use those parts.
That isn't always a bad thing. Developers often use their own standard tools to work efficiently. The key is knowing what is custom to your business, what is licensed, and what you can do with each part.
Design, Branding And Content
Design files, icons, illustrations, photos, videos, website copy, product descriptions and onboarding screens can all carry copyright.
Your business name, logo, slogan and product name may also be protected as trademarks if they identify your business as the source of goods or services. Trademark rights in the US arise mainly from use in commerce, and federal registration with the US Patent and Trademark Office under the Lanham Act can give you stronger nationwide protection.
If a designer created your logo, you still want a written copyright assignment for the artwork. Trademark rights and copyright rights are different, and you may need both covered.
Databases, Customer Data And Analytics
Customer data isn't automatically IP just because it sits inside your app or website. Copyright may protect the selection or arrangement of a database in some cases, but individual facts and raw data are usually not protected by copyright.
Your rights to use customer data usually come from your contracts, website terms, privacy policy, consent flows and applicable privacy or consumer protection laws. The Federal Trade Commission can take action under the FTC Act if your business makes misleading privacy claims or handles data in an unfair way.
For practical purposes, make sure your agreements say who can access the data, who can export it, what happens at the end of the relationship, and what security measures apply.
Trade Secrets And Confidential Information
Some website or app assets are valuable because they're secret. This might include your algorithms, pricing logic, customer lists, product roadmap, conversion data or internal documentation.
The Defend Trade Secrets Act can protect trade secrets at the federal level, but only if you take reasonable steps to keep them secret. That usually means using confidentiality terms, limiting access, controlling repositories, and removing access when people leave a project.
Does Copyright Automatically Transfer To Your Business?
No, copyright doesn't automatically transfer to your business just because you paid for the work, unless an exception applies.
For contractors, the cleanest option is a written IP assignment. This should say that the contractor assigns to your business all right, title and interest in the work product created for the project. It should also cover future rights, updates, deliverables and any moral rights waivers or consents to the extent the law allows.
A work-made-for-hire clause can help in some situations, but it isn't a magic phrase. Under the Copyright Act, commissioned works only qualify as works made for hire if they fall within specific categories and there's a written agreement saying they're works made for hire. Custom software and app development often don't fit neatly into those categories, so an assignment is usually still needed.
For employees, your business will often own copyright in work created within the scope of employment. Even so, many businesses still include IP assignment clauses in employment agreements to reduce uncertainty. State law can affect some employment and invention assignment issues, so tailored wording matters.
If you're registering copyright, the US Copyright Office process can strengthen your position. Copyright exists automatically when the work is created, but registration is generally needed before you can file a copyright infringement lawsuit in federal court. If you register within three months after publication or before infringement begins, you may also have access to statutory damages and attorney's fees, which can be valuable in a dispute.
Can You Use Third-Party Code, Plugins And Open Source Software?
Yes, you can usually use third-party code, plugins and open source software, but only within the license terms that apply to them.
Most modern websites and apps use third-party materials. That might include:
- open source libraries and frameworks
- commercial plugins and themes
- stock images, fonts, icons and videos
- payment, messaging, analytics or map APIs
- developer tools and software development kits
- AI-generated or AI-assisted outputs
The risk isn't that third-party materials are always bad. The risk isn't knowing what was used, what the license allows, and whether the developer had authority to include it.
Some open source licenses are permissive and relatively simple to comply with. Others can require you to provide notices, share license terms, or in some cases make certain source code available if you distribute software based on that code.
Commercial assets also have limits. A stock photo license may allow use on your website but not in a paid app. A font license may cover a desktop design file but not web embedding. A plugin license may be tied to one account or one domain.
Ask your developer for a third-party materials list before launch. It should identify each material, where it came from, the license that applies, and any ongoing fees or obligations.
AI tools add another layer. If your designer or developer uses an AI tool to generate code, images or copy, check the tool's terms and ask what human review took place. Copyright protection and ownership for AI-assisted work can be more complicated, especially where there's little human authorship.
How Do You Check And Lock Down Your IP Rights?
You check and lock down your IP rights by doing a practical audit, fixing missing assignments, and making sure your business controls the key accounts and deliverables.
This doesn't need to be a huge legal project. Start with the assets that would hurt most if you lost access or ownership.
Step 1: List What Was Built
Create a simple inventory of what exists. Include:
- source code repositories
- design files and brand files
- website copy, images, video and audio
- databases and data exports
- API integrations and developer accounts
- domain names, hosting accounts and app store accounts
- admin logins and passwords
- technical documentation and deployment instructions
If you can't see or access something, ask for it now. It's much easier to do this while the relationship is friendly and the project is still active.
Step 2: Review Your Contracts
In any developer agreement, look for clear wording on ownership, licenses, source code, third-party materials, confidentiality and handover.
Helpful clauses usually cover:
- IP assignment: who owns the custom work product and when ownership transfers
- pre-existing IP: what the developer keeps and what license your business receives
- third-party materials: who is responsible for compliance and costs
- confidentiality: how your business information and code are protected
- handover: what must be delivered when the project ends
- support and maintenance: what happens after launch
- payment milestones: whether ownership depends on payment in full
Templates can be a useful starting point, but website and app projects often have specific technical and commercial details. Documents work best when they match how your project is actually being built and handed over.
Step 3: Fix Gaps With Assignments And Releases
If the original agreement is unclear or missing, you may be able to fix the gap with a short IP assignment or contractor release signed by the creator.
This is especially useful if you're preparing for:
- a funding round
- a business sale
- a platform rebuild
- a dispute with a developer
- a trademark or copyright enforcement issue
If multiple people contributed to the project, you may need assignments from each of them or from the agency that had proper rights from its team and subcontractors.
Step 4: Control The Accounts
Ownership isn't just about legal rights. It's also about practical control.
Your business should control the domain name, hosting, app store accounts, analytics, payment accounts, email marketing platforms and code repositories wherever possible. If these sit in a developer's personal or agency account, you may face delays or disruption if the relationship ends.
Make sure admin access is set up correctly and that access is removed when a contractor or employee no longer needs it.
Step 5: Protect Your Brand And Confidential Information
If your website or app name is central to your business, consider whether trademark registration with the USPTO makes sense. A clearance search before you commit to a name can also help you avoid adopting a brand that's too close to someone else's.
For confidential information, use nondisclosure agreements where appropriate, but don't rely on paperwork alone. Limit access, use secure systems, and keep records of who can see sensitive material.
Frequently Asked Questions
Can I Stop My Developer Reusing My Code For Another Client?
Maybe. If your business owns the custom code or the developer agreed not to reuse it, you may have a strong position. If the developer owns the code or reused their pre-existing tools, your rights may be limited to using the finished product for your own business.
Do I Own My Domain Name?
You own or control your domain name if it's registered in your business's name and you control the registrar account. If your developer registered it under their own name or account, ask for a transfer so your business has direct control.
Who Owns The Content On My Website?
The creator usually owns copyright unless they're your employee creating it within their job, or they assigned the rights to your business in writing. This applies to copy, images, videos, illustrations and many design assets.
Can I Sell My App If The IP Paperwork Is Missing?
You can try, but missing IP paperwork can slow down or reduce the value of a sale. Buyers usually want proof that your business owns or has proper licenses to the code, content, data, brand and accounts.
Key Takeaways
- Paying for a website or app doesn't automatically mean your business owns all the IP.
- Copyright in contractor-created code, design and content usually needs a written assignment.
- Trademarks, domain names, app store accounts, data and trade secrets each need separate checks.
- Third-party code, plugins, stock assets and AI-generated materials can create license obligations.
- A practical IP audit should cover contracts, deliverables, account control, source code and handover rights.
- Clear agreements early can make launches, funding rounds, business sales and developer changes much easier.
If you'd like help with your website or app development agreement, IP assignment, contractor terms, open source review or handover checklist, you can reach our team at (888) 449-8437 or team@sprintlaw.com. Where legal services are required, they're provided by licensed US lawyers at ElevateNext US, LLC, a trusted US law firm, through the Sprintlaw platform.








