Privacy Policy

Version 2026-09-21 · Last updated: September 21, 2026

This Privacy Policy explains how ALL BEST MUSIC & MEDIA ("ABM", "we", "us"), a Wyoming company, handles personal information on abm.to and related domains (the "Service"). It forms part of, and uses the defined terms of, our Terms of Service, is published under the same version number, and is covered by the Terms acceptance you give at signup and after each Terms update. We keep a record of the Terms version you accepted and the date and time you accepted it. You control optional cookies on the cookie preferences page — that consent is separate from, and revocable independently of, your acceptance of the Terms. Copyright complaints are handled under our DMCA Policy.

1. Who we are & how to reach us

ABM is the controller of the personal information described here. Contact us at Management@e.abm.to for any privacy question, request, or complaint. Creators who use ABM to communicate with their own audiences are separately responsible for how they use the contact information their fans give them.

2. Information we collect

  • Account data — email address, display name, handle, password credentials held by our managed authentication provider (we never store your password), and your role (fan, artist, blogger, interviewer, business, admin).
  • Application data — information you submit when applying as an artist, blogger, interviewer, or business, including links, biography, and any identity documents a business uploads for people it adds.
  • Content — releases, tracks, lyrics, credits, blog posts, interviews, events, posts, livestreams, replays, chat messages, and the media files you upload.
  • Payment data — subscription state, plan, invoice history, gift and donation records, merchandise and copyright-filing purchases, payout records, and processor identifiers. Card numbers are entered directly with Stripe and never reach ABM's servers.
  • Orders and filings — merchandise selections, recipient name, shipping address, fulfillment and tracking details, plus the work, authorship, ownership, file links, selected regions, registration status, and certificates used to provide copyright-filing assistance.
  • Linked accounts — social-platform account identifiers, usernames, permissions, encrypted access and refresh credentials, publishing status, and error records when you connect an account for cross-posting.
  • Communications — messages you send through the Service, email delivery and unsubscribe state, and support correspondence.
  • Usage & device data — pages and profiles viewed, view verification signals used to prevent fraudulent paid views, sign-in events and failed-login counts (used for brute-force lockouts), approximate device/browser information, and IP addresses (stored in hashed form for view and abuse controls).
  • Moderation data — reports you file or that concern you, automated image-safety and audio-fingerprint results, takedown records, and DMCA notices.

3. How we use it

  • Create and secure your account and enforce role-based access.
  • Deliver the Service: publishing, memberships, messaging, events, livestreams.
  • Process payments, memberships, gifts, donations, merchandise orders, copyright filings, and creator payouts.
  • Publish creator-approved content to linked social accounts and record delivery status.
  • Deliver advertisements, count impressions and clicks, and calculate creator and platform shares.
  • Send transactional email (sign-in, applications, invites, receipts, alerts).
  • Detect fraud and abuse, including view-botting, spam, and account takeover.
  • Moderate content, respond to reports, and handle copyright claims.
  • Measure aggregate usage to improve the Service — only with analytics consent.
  • Meet legal, tax, and accounting obligations.

Where required by law, our bases for processing are: performance of our contract with you (account, memberships, payouts), our legitimate interests (security, fraud prevention, service improvement), your consent (optional cookies, marketing email), and legal obligation (tax and DMCA records).

4. Cookies & similar technologies

We set strictly necessary cookies and local storage to keep you signed in, secure your session, remember your consent choice, and complete checkout. Preference, analytics, and advertising technologies are off by default and are only used after you turn them on. Manage or withdraw consent at any time on the cookie preferences page — withdrawing consent stops future use of those technologies.

5. What is public

Creator profiles and handles are public by design, including your display name, biography, avatar, cover image, and public sections. Music, videos, and blog content may be restricted to subscribers. Livestream chat messages are visible to other viewers. Your email address, mailing address, payout details, and payment identifiers are never shown publicly.

6. Sharing & service providers

We do not sell your personal information. We share it only with:

  • Lovable Cloud — hosting, database, file storage, authentication.
  • Stripe — payments, subscriptions, gifts, and creator payouts.
  • Print fulfillment providers — merchandise artwork, variants, recipient name, shipping address, and order details needed to print and ship orders.
  • Copyright registries and filing partners — work, authorship, ownership, and contact information needed for the regions you select.
  • Linked social platforms — content and account authorization data needed to connect your account and publish at your direction.
  • Advertisers — campaign delivery uses audience and performance data; reports are aggregated where practical and do not include private account or payment details.
  • Brevo — transactional and notification email delivery.
  • ACRCloud — audio fingerprinting for copyright tooling.
  • AI processing — content you submit for image safety checks or to the AI help assistant is sent to our AI provider for that request; it is not used to train third-party models by us.
  • Creators and businesses — when you subscribe to or follow a creator, or claim an invite, that creator or business can see the limited subscriber information needed to manage their audience.
  • Legal and safety — law enforcement or other parties where required by law, to enforce our Terms, or to protect rights and safety. DMCA notices, including the claimant's contact information, are shared with the affected user as the DMCA requires.
  • Business transfers — a successor in a merger, acquisition, or asset sale, subject to this policy.

7. Retention

  • Account and profile data: for as long as your account is open.
  • Content: until you delete it, or it is taken down under our Terms.
  • Payment, payout, merchandise, fulfillment, copyright-filing, and tax records: typically 7 years, as required by tax, accounting, dispute, and legal rules.
  • Security logs (sign-in events, lockout counters, hashed IPs): up to 12 months, and longer where an investigation is open.
  • Moderation, takedown, and DMCA records: retained to operate our repeat-infringer policy and defend legal claims.
  • Email suppression records: retained indefinitely so we honor your unsubscribe.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, to object to processing based on legitimate interests, to withdraw consent, and to opt out of the sale or sharing of personal information (we do neither) — and to not be discriminated against for exercising these rights. Email Management@e.abm.to from your account address, or contact us with enough detail to verify your identity. We respond within 30 days (45 days where the law allows an extension). You may appeal a refusal by replying to our decision, and EU/UK users may complain to their local data protection authority.

You can also edit most profile data yourself in your dashboard, cancel a membership on the subscription page, unsubscribe from any marketing email, and reset cookie consent at any time.

9. Security

We use HTTPS everywhere, row-level database access rules scoped to your account and role, server-side verification of privileged actions, encryption at rest provided by our hosting platform, login rate limits and temporary lockouts, and an audit log of administrator actions. No system is perfectly secure; keep your password unique and tell us immediately if you suspect account compromise. See our Trust & Security page for more.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, contact us and we will delete it.

11. International transfers

ABM operates from the United States, and our providers process data there. If you use the Service from outside the U.S., you understand your information is transferred to and processed in the United States under appropriate safeguards.

12. Changes

We may update this policy. Material changes will be announced in the app or by email, and the "last updated" date above will change. Continued use after the effective date means you accept the updated policy.

13. Contact

Privacy questions, requests, or complaints: Management@e.abm.to. Copyright matters go through our DMCA request form.