AGREEMENT

Privacy Policy

Last updated: 21 June 2026
Business name: All Humans Cry
Legal form: Eenmanszaak
KVK number: 94632200
VAT number: NL005097773B49
Website: allhumanscry.com
Contact address: G.J.L. Ankersmitlaan 61, Deventer, The Netherlands
Support email: support@allhumanscry.com

This Privacy Policy explains how All Humans Cry (“All Humans Cry,” “we,” “us,” or “our”) collects, uses, stores, shares, protects, and otherwise processes personal data when you visit our website, create an account, purchase a subscription, upload releases, request payouts, contact support, submit copyright or fraud reports, use our dashboard, or otherwise use our services.

All Humans Cry is based in the Netherlands and processes personal data in accordance with applicable privacy and data protection laws, including the General Data Protection Regulation (“GDPR”) where applicable.

By using allhumanscry.com or our services, you acknowledge that your personal data may be processed as described in this Privacy Policy.

 

1. Who We Are

All Humans Cry is an eenmanszaak registered in the Netherlands.

For the personal data described in this Privacy Policy, All Humans Cry generally acts as the data controller for user account data, subscription data, payout data, support data, release administration data, platform data, and related service data.

Certain third parties, including distribution partners, DSPs, payment providers, hosting providers, email providers, analytics providers, and other service providers, may act as separate controllers or processors depending on the service they provide and their own legal role.

All privacy and GDPR-related requests may be sent to:

support@allhumanscry.com

All Humans Cry has not appointed a Data Protection Officer unless legally required to do so.

 

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data relating to:

  • artists;
  • labels;
  • managers;
  • representatives;
  • business users;
  • consumers;
  • rights holders;
  • website visitors;
  • support contacts;
  • copyright reporters;
  • fraud reporters;
  • payout contacts;
  • other users or persons interacting with All Humans Cry.

 

This Privacy Policy does not replace the separate privacy policies of third-party services such as Stripe, PayPal, Google, Too Lost, DSPs, banks, or other providers.

 

3. Age Requirement

Our services are not intended for users under the age of 18.

Users must be at least 18 years old to create an account or use All Humans Cry’s services. If we discover that a user is under 18, we may restrict or delete the account and take any other reasonable action required to protect the user, comply with law, or enforce our Terms of Service.

 

4. Personal Data We Collect

We collect different categories of personal data depending on how you use our website and services.

4.1 Account Data

When you create an account, we may collect:

  • full name;
  • email address;
  • password;
  • address;
  • phone number;
  • payout-related details;
  • tax details;
  • company details, if applicable;
  • account status;
  • email verification status;
  • login and account activity information.

 

Passwords are stored using security measures such as hashing. We do not have access to your plain-text password.

Users must verify their email address. If an email address is not verified within 24 hours, the account may be deleted.

We do not currently collect profile or avatar images, date of birth, nationality, country of residence, or government identity documents during standard account creation.

 

4.2 Release and Artist Data

When you submit a release, we may collect and process:

  • artist name;
  • label name;
  • release title;
  • track title;
  • audio files;
  • cover artwork;
  • lyrics;
  • songwriter names;
  • producer names;
  • featured artist names;
  • vocalist names;
  • composer names;
  • publisher names;
  • ISRCs;
  • UPCs;
  • genre;
  • language;
  • release date;
  • explicit content marker;
  • copyright line;
  • publishing line;
  • social links;
  • Spotify artist profile links;
  • Apple Music artist profile links;
  • proof-of-rights documents;
  • beat licenses;
  • sample clearances;
  • cover song licenses;
  • other release-related files, information, and documentation.

 

Audio files, artwork files, and proof-of-rights documents may be stored on All Humans Cry’s server storage.

 

4.3 Payment and Subscription Data

Subscription payments are handled through Stripe using a secure API connection between All Humans Cry and Stripe.

All Humans Cry does not store full card numbers on its own servers.

We may process or store payment and subscription-related data such as:

  • Stripe customer ID;
  • Stripe subscription ID;
  • plan name;
  • payment status;
  • renewal date;
  • cancellation status;
  • payment history;
  • invoice history;
  • billing email;
  • billing address;
  • subscription activity;
  • transaction status information.

 

Stripe may support payment methods depending on the country of the user, including Visa, Mastercard, Klarna, iDEAL, Wero, and other payment methods supported by Stripe.

Payment information is handled by Stripe. Stripe may process payment data under its own terms and privacy policy.

 

4.4 Payout Data

For royalty payouts, we may process payout-related information. Depending on the payout method and user country, this may include:

  • payout method;
  • bank transfer information;
  • PayPal information;
  • payout request history;
  • payout status;
  • payout amount;
  • payout date;
  • payout fees;
  • payment provider information;
  • tax details required for payout processing.

 

All Humans Cry may process payout information necessary to send royalties, verify payout requests, prevent fraud, and comply with legal or tax obligations.

 

4.5 Tax Data

Before payout, we may collect or process tax-related details such as:

  • country of tax residence;
  • VAT number;
  • business name;
  • personal tax number;
  • company registration number;
  • W-8BEN, W-9, or similar tax forms where applicable;
  • other tax information required for payout, reporting, compliance, or verification.

 

Users are responsible for providing accurate tax information.

 

4.6 Verification and KYC Data

All Humans Cry does not currently collect government identity documents as part of standard onboarding.

However, All Humans Cry may request identity, address, company, tax, or payout verification where necessary for fraud prevention, payment security, copyright compliance, tax compliance, sanctions checks, partner requirements, payout verification, or legal compliance.

In the future, All Humans Cry may collect or process government identity documents or use a third-party KYC provider where necessary.

If verification documents are manually reviewed, access is limited to authorized All Humans Cry administrators. Verification documents and related information are intended to be stored securely and encrypted where technically available.

 

4.7 Royalty and Analytics Data

We may collect and store royalty, stream, and analytics data, including:

  • royalty reports from Too Lost or other distribution partners;
  • dashboard royalty balances;
  • DSP data;
  • country data;
  • track data;
  • stream data;
  • royalty data;
  • date/month reporting data;
  • platform/source data;
  • payout eligibility data;
  • fraud detection signals;
  • release performance data.

 

We may combine royalty data with account data, release data, payout data, and fraud detection data where necessary to provide services, calculate balances, process payouts, detect fraud, prevent abuse, and comply with legal or contractual obligations.

 

4.8 Support and Communication Data

All Humans Cry operates a self-coded support ticket system. We may collect and store:

  • support messages;
  • email communications;
  • ticket history;
  • attachments;
  • screenshots;
  • documents;
  • complaint details;
  • release-related communications;
  • payout-related communications;
  • copyright and fraud communications;
  • policy-related communications.

 

Users may also contact us by email at support@allhumanscry.com.

 

4.9 Transactional Email Data

We may send transactional or service-related emails, including:

  • account verification emails;
  • password reset emails;
    subscription
  • confirmation emails;
  • renewal notices;
  • payout updates;
  • release status updates;
  • policy updates;
  • fraud notices;
  • copyright notices;
  • support responses;
  • account security emails.

 

These emails may be sent using All Humans Cry tools, SMTP functionality, Brevo, or other email service providers.

 

4.10 Marketing Email Data

We may send newsletters or promotional emails where the user has opted in or where otherwise permitted by law.

Marketing emails may be sent using All Humans Cry tools, Brevo, or other newsletter/email tools.

Users can unsubscribe from marketing emails at any time. Unsubscribing from marketing emails does not stop transactional, legal, account, security, subscription, payout, release, copyright, or fraud-related emails.

 

4.11 Website, Device, and Analytics Data

When you visit or use our website, dashboard, or platform, we may collect technical and usage data such as:

  • IP address;
  • device type;
  • browser type;
  • operating system;
  • country or approximate location;
  • pages visited;
  • clicks and interactions;
  • referral source;
  • session data;
  • date and time of visits;
  • website activity;
  • platform usage information.

 

All Humans Cry may use Google Analytics and All Humans Cry Analytics to monitor website performance, user interactions, traffic sources, device information, browser information, country-level analytics, and platform usage.

Even where certain analytics tools do not directly identify you by name, technical identifiers and usage data may still qualify as personal data under applicable privacy law if they relate to an identified or identifiable person.

 

5. Cookies and Similar Technologies

All Humans Cry may use cookies or similar technologies where necessary for website functionality, security, analytics, session management, user preferences, or performance measurement.

You have stated that All Humans Cry does not intentionally use cookies for all features. However, some tools, including analytics, embedded services, WordPress functionality, security tools, or third-party integrations, may use cookies, local storage, pixels, identifiers, or similar technologies.

Where required by law, we will request consent before using non-essential cookies or similar tracking technologies.

More information may be provided in our separate Cookie Policy.

 

6. Purposes of Processing

All Humans Cry may process personal data for the following purposes:

  • creating and managing accounts;
  • verifying email addresses;
  • providing access to the dashboard;
  • processing subscriptions;
  • processing payments through Stripe;
  • processing payout requests;
  • administering royalty balances;
  • collecting royalties from distribution partners;
  • paying eligible royalties;
  • reviewing releases;
  • storing and processing audio, artwork, metadata, and rights documents;
  • delivering releases to Too Lost or other distribution partners;
  • delivering releases to DSPs through distribution partners;
  • providing artist support;
  • operating the support ticket system;
  • sending transactional emails;
  • sending marketing emails where permitted;
  • managing copyright complaints;
  • handling takedown requests;
  • handling fraud reports;
  • detecting and preventing artificial streaming, fraud, payment abuse, copyright abuse, and account abuse;
  • carrying out manual review of flagged accounts, releases, payout requests, or activities;
  • complying with tax, accounting, legal, sanctions, and regulatory obligations;
  • maintaining business records;
  • improving website performance and service functionality;
  • analyzing platform usage;
  • protecting the security and integrity of our website, systems, users, rights holders, distribution partners, and DSPs;
  • enforcing our Terms of Service and other policies;
  • resolving disputes and legal claims.

 

7. Legal Bases for Processing

Where GDPR applies, we rely on one or more legal bases for processing personal data.

7.1 Performance of a Contract

We process personal data where necessary to provide services under our Terms of Service, Distribution Agreement, subscription terms, payout terms, and related agreements. This includes account creation, subscription management, release submission, distribution, royalty administration, payout processing, support, and takedown handling.

 

7.2 Legal Obligation

We process personal data where necessary to comply with legal obligations, including tax, accounting, bookkeeping, fraud prevention, sanctions, consumer law, copyright, payment, regulatory, and legal claim obligations.

 

7.3 Legitimate Interests

We process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Legitimate interests may include:

  • operating and improving the platform;
  • preventing fraud and artificial streaming;
  • detecting copyright abuse;
  • protecting users and rights holders;
  • securing accounts and systems;
  • handling disputes and complaints;
  • maintaining business records;
  • enforcing agreements and policies;
  • analyzing service performance;
  • preventing repeat offenders from abusing the platform;
  • communicating with users about service-related matters.

 

7.4 Consent

We rely on consent where required, such as for certain marketing emails, non-essential cookies, or similar tracking technologies.

You may withdraw consent where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

 

7.5 Establishment, Exercise, or Defence of Legal Claims

Where necessary, we may process personal data to establish, exercise, or defend legal claims, respond to disputes, handle copyright complaints, investigate fraud, recover debts, or enforce our rights.

 

8. How We Share Personal Data

All Humans Cry may share personal data with third parties where necessary to provide services, comply with law, process payments, process payouts, deliver releases, prevent fraud, handle disputes, or enforce our agreements.

Third parties may include:

  • Too Lost;
  • other distribution partners;
  • DSPs and platforms;
  • Stripe;
  • PayPal;
  • banks;
  • Hetzner or other hosting providers;
  • analytics providers, including Google Analytics;
  • email providers, including Brevo and SMTP providers;
  • support, technical, or infrastructure providers;
  • legal advisors;
  • accounting advisors;
  • anti-fraud and compliance partners;
  • copyright claimants and rights holders where necessary;
  • courts, authorities, regulators, or law enforcement where required or legally permitted.

 

We may share release data, artist data, metadata, royalty data, rights information, and related documentation with distribution partners and DSPs to deliver, monetize, administer, report, and manage releases.

We may share payment and subscription data with payment providers to process payments, subscriptions, renewals, refunds, chargebacks, and payment disputes.

We may share payout data with PayPal, banks, or other payout providers to process royalty payouts.

We may share relevant information with fraud, compliance, legal, or rights-related parties where necessary to investigate fraud, artificial streaming, copyright claims, account abuse, payment abuse, or legal disputes.

All Humans Cry does not sell personal data.

 

9. International Transfers

All Humans Cry works with users worldwide and may use service providers located outside the European Economic Area (“EEA”), including providers based in the United States or other countries.

Personal data may be transferred outside the EEA where users, distribution partners, DSPs, payment providers, email providers, analytics providers, support providers, technical providers, or other service providers are located internationally.

Where required by applicable law, we use appropriate safeguards for international transfers, such as adequacy decisions, Standard Contractual Clauses, contractual protections, or other lawful transfer mechanisms.

 

10. Hosting, Storage, and Backups

All Humans Cry is hosted by Hetzner. The server location is currently Finland/EU.

Audio files, artwork files, rights documents, release data, support data, and other platform data may be stored on All Humans Cry server storage hosted by Hetzner.

All Humans Cry makes daily backups. The latest three backups may remain saved. Backups are stored at Hetzner.

Backups may contain personal data, release data, support data, account data, royalty data, or other information. Backup data may remain temporarily even after data is deleted from the live system, until the backup is overwritten or deleted according to backup retention practices.

 

11. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may vary depending on the type of data, service, account status, legal obligation, fraud risk, copyright issue, royalty issue, tax requirement, accounting requirement, dispute, or operational need.

11.1 Account Data

Account data may generally be kept for up to 2 years after account closure, unless longer retention is necessary for legal, tax, royalty, fraud, copyright, security, dispute, or legitimate business reasons.

 

11.2 Unverified Accounts

Accounts that do not verify their email address may be deleted after 24 hours.

 

11.3 Financial, Tax, Invoice, Subscription, and Royalty Records

Certain financial, tax, subscription, invoice, payout, and royalty records may be retained for the legally required retention period.

 

11.4 Royalty and Payout Records

Royalty and payout records may be retained as long as reasonably necessary to prevent abuse, handle disputes, comply with law, administer royalties, process corrections, recover overpayments, resolve claims, and protect legal rights.

 

11.5 Fraud and Copyright Records

Fraud, artificial streaming, copyright, takedown, rights dispute, and enforcement records may be retained as long as reasonably necessary to prevent abuse, handle disputes, comply with law, protect rights, enforce policies, and prevent repeat offenders.

 

11.6 Support Tickets and Communications

Support tickets, attachments, screenshots, documents, and communication history may be retained as long as needed for support, legal, fraud, copyright, accounting, royalty, or dispute reasons.

 

11.7 Uploaded Release Files After Takedown

Uploaded release files, artwork, audio, metadata, and rights documents may be retained after takedown as long as needed for royalty, dispute, legal, fraud, copyright, recordkeeping, or compliance reasons.

 

12. Security

All Humans Cry uses reasonable technical and organizational measures designed to protect personal data.

Security measures may include:

  • hashed passwords;
  • HTTPS/SSL;
  • access controls;
  • limited admin access;
  • backups;
  • fraud monitoring;
  • email verification;
  • secure payment processing through Stripe;
  • server security;
  • IP whitelisting;
  • restricted administrator access;
  • review of suspicious activity.

 

No website, server, database, payment system, email system, or internet transmission is 100% secure. We cannot guarantee absolute security.

You are responsible for keeping your login credentials secure and notifying us promptly if you suspect unauthorized access to your account.

 

13. Your GDPR Rights

Where GDPR applies, you may have the following rights:

  • right of access;
  • right to correction;
  • right to deletion;
  • right to restriction of processing;
  • right to object;
  • right to data portability;
  • right to withdraw consent;
  • right to lodge a complaint with a supervisory authority.

 

To exercise your privacy rights, contact: support@allhumanscry.com

We may request information to verify your identity before fulfilling a privacy request.

Some data may not be deleted immediately if it is needed for tax, royalty, accounting, fraud prevention, copyright, legal, security, dispute, payment, or compliance reasons.

If you are located in the Netherlands, you may also contact the Dutch supervisory authority, the Autoriteit Persoonsgegevens, if you believe your data protection rights have been violated.

 

14. Marketing Communications

Users may opt in to receive newsletters or promotional emails.

You can unsubscribe from marketing emails at any time by using the unsubscribe option where available or by contacting us.

Even if you unsubscribe from marketing emails, we may still send transactional, legal, account, security, subscription, payout, release, copyright, fraud, or service-related emails.

 

15. Automated Decision-Making and Fraud Detection

All Humans Cry does not make purely automated decisions that have legal or similarly significant effects without human review.

We may use fraud detection signals, analytics data, account activity, payout activity, streaming activity, royalty activity, metadata patterns, rights documentation, and other information to flag accounts, releases, or payout requests for manual review.

Important enforcement decisions, such as account bans, royalty freezes, release takedowns, or payout blocks, may involve review by All Humans Cry.

 

16. Third-Party Websites and Services

Our website or services may link to or rely on third-party websites, platforms, tools, APIs, payment services, DSPs, distribution partners, analytics tools, email tools, or other services.

This Privacy Policy does not apply to third-party websites or services that are not controlled by All Humans Cry.

Third parties may process your personal data under their own privacy policies. You should review the privacy policies of Stripe, PayPal, Google, Too Lost, DSPs, banks, and any other relevant service providers.

 

17. Changes to this Privacy Policy

All Humans Cry may update this Privacy Policy from time to time for legal, operational, technical, privacy, security, payment, fraud prevention, DSP, distribution partner, or business reasons.

If changes are material, we may notify users by email, dashboard notice, website notice, updated policy publication, or another reasonable method.

The “Last updated” date at the top of this Privacy Policy indicates the date of the latest version.

 

18. Contact

For privacy questions, GDPR requests, data access requests, data deletion requests, correction requests, or other privacy-related matters, contact:

All Humans Cry
G.J.L. Ankersmitlaan 61
Deventer, The Netherlands
KVK: 94632200
VAT: NL005097773B49
Email: support@allhumanscry.com
Website: allhumanscry.com