Privacy policy
Last updated 2 November 2026
This explains what Hummable LLC (“Hummable”, “we”), a Florida limited liability company, collects, what we do with it, and your choices. It covers clients who book campaigns, creators who make videos with us, creators we may offer a paid post to, and anyone who visits this site. We collect only what we need, and we never sell it.
What we collect
- When you plan or book a campaign: your name, email and role (artist, manager or label); your song (its link or title, the artist and, if it isn’t out yet, its release date); and your plan and notes, such as the budget, start date, formats and countries.
- When you pay: Stripe takes your card. We see the payment’s amount and status, never your card number.
- Your account: your email and a scrambled (hashed) form of your password, so we never see the password itself. While you’re signed in, your browser keeps a sign-in token, and we keep only a hashed copy of it.
- When you email us: your message and your address.
- If you’re a creator we work with: what’s public on your TikTok page (your handle, followers, posts and their views), and what you tell us, such as your email, your rate, your answers to offers and how to pay you. If you connect your TikTok account, we also get your basic profile and your videos’ stats.
- If you’re a creator we may offer a paid post to: what’s public on your TikTok page and the page your bio links to. More on that below.
- Automatically: your IP address, kept only in a salted, hashed form, to stop spam and repeated sign-in attempts. We count visits with Cloudflare Web Analytics, which uses no cookies and doesn’t follow you to other sites.
To book a campaign, we need your name, email and song: we can’t run it without them.
Why we use it
Privacy laws in some places, like the EU and the UK, ask us to name the legal reason for each use. They’re in brackets.
- To plan your campaign, book creators, show you the results, and send the emails it needs, such as receipts, “set your password” links and updates (to carry out our agreement with you).
- To take payments and keep tax and accounting records (because the law requires it).
- To offer creators paid posts that suit them, and to pay the ones we work with (our agreement with creators we work with; for creators we may contact, our legitimate interest in finding creators for our clients’ songs, which you can object to at any time).
- To email offers to creators who asked for them (their consent, which they can take back at any time).
- To keep the site secure, stop abuse and count visits (our legitimate interest in a site that’s safe and works).
We don’t use your information for advertising, and we don’t sell it or share it for advertising.
Creators we may contact
We look for creators whose videos suit the songs our clients bring, and offer them paid posts. If you’re one of them:
- What we collect: your handle and display name, your follower count, your recent posts (what they’re about, the sounds they use and their views), and a business email if you published one, with a note of where we found it.
- Where we get it: your public TikTok page and the page your bio links to, read through Apify, a data service. We never sign in to see anything.
- Why: to see which songs suit your videos, and to offer you a paid post. Clients never see your details unless you say yes to their campaign, and we never sell them.
- Who we write to first: creators in the US, Canada, Australia and New Zealand, with a direct message from someone on our team, unless their bio asks for no offers. Anywhere else, including the UK and the EU, we write only to creators who’ve worked with us or asked us for offers. We only email creators who’ve asked for offers by email.
- How often: one offer. Unless you ask for more on its page, we won’t write to you about other songs. If you do ask for offers by email and three in a row go unanswered, someone on our team may send the next one as a direct message, and after that we leave you be for 90 days.
- Saying no: every offer has a link that stops them for good, or just reply “stop”. We then keep only your handle and email, so we never write to you again.
- How long we keep it: if we never work together, we delete your details 12 months after we found you or last offered you a post, whichever is later (a campaign’s record of the offers it made keeps just your handle). If you’re outside the countries above and haven’t asked for offers, we delete them as soon as we see where you are.
How we choose who gets an offer: a program matches creators to each song by what they post, how their videos usually do and, for creators we work with, their rate. It only decides who hears about an offer first. If you think it got you wrong, email us and a person will look again.
Who sees it
- Creators get what your campaign needs, like the song and the brief, never your email or payment details.
- Clients see the handles, posts and views of the creators on their campaigns, once those creators have said yes. Creators agree to this in the offer they accept.
- Services that run parts of Hummable for us: Cloudflare (hosting, storage, email and visit counts), DigitalOcean (our internal site’s server), Stripe (payments), Resend and our mailbox provider (our emails), PayPal (paying creators), Apify (reading public TikTok pages), TikTok (when a creator connects their account) and Anthropic (AI tools that help us draft and check campaign work). Each may use it only to provide its service to us. Stripe and PayPal also follow their own privacy policies for payments, for example to stop fraud.
- Anyone the law requires, or where it’s needed to protect our rights or someone’s safety.
- A buyer, if the business is ever sold, under this same policy.
Where it’s kept
We’re based in Florida, in the United States, and so are most of the services above, so your information is kept and used there (Apify is in the EU). Courts and authorities in the US may be able to reach information kept there. The services we use are bound by data protection agreements, with the EU’s standard contractual clauses or the EU–US Data Privacy Framework where the law asks for them.
How long we keep it
- A form you send: at most 14 days on our servers, until it reaches our own records.
- Campaigns and payments: while we run the campaign, then up to seven years for tax and legal records.
- Creators we work with: while we work together, then payment records for up to seven years.
- Creators we may contact: 12 months at most, unless we work together (see above).
- Emails to us: as long as we need them for what they’re about.
- Your sign-in: 30 days.
We delete what we no longer need.
Your rights
Wherever you live, you can ask us for a copy of your information, or to correct or delete it: email hello@hummable.fm. We answer within 30 days, and may ask you to show it’s you. We keep what the law makes us keep, such as payment records.
Depending on where you live (the EU, the UK, Canada, Australia and some US states, among others), you can also object to how we use it, and to offers at any time (we then stop); ask us to limit how we use it; get it in a form you can take elsewhere; and take back consent you gave. We don’t sell or share personal information, or use it for targeted ads, so there’s nothing to opt out of there.
If you’re unhappy with how we’ve handled your information, tell us first and we’ll reply within 30 days. You can also complain to your privacy regulator: in the UK, the Information Commissioner’s Office; in the EU, your country’s data protection authority; in Canada, the Office of the Privacy Commissioner; in Australia, the OAIC.
Your browser
We don’t use cookies for tracking or ads. The site keeps two things in your browser: the form’s answers while you fill it in (gone when you close the tab or send it), and your sign-in token while you’re signed in (gone when you sign out). We don’t follow you across other sites, so the site works the same whether or not your browser sends a “Do Not Track” signal.
Keeping it safe
Everything travels encrypted (HTTPS). Passwords, sign-in tokens and IP addresses are stored only as hashes, and only our team can see your details. No system is perfectly secure: if something goes wrong, we’ll tell you and the regulators as the law requires.
Children
You must be 18 or older to book a campaign or to work with us as a creator. We don’t knowingly collect information from children under 13; if you think we have, email us and we’ll delete it.
Changes
When this policy changes, the date at the top changes too. If a change matters, we’ll email clients and creators before it applies.
Contact
Questions or requests: hello@hummable.fm. One of our founders leads privacy and answers them.