Privacy Policy

Last updated: March 15, 2026

1. Introduction

QuickStave ("we", "our", "us") is a browser-based music notation application. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service at quickstave.com and quickstave.app.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, display name, and profile picture (if provided via OAuth sign-in with Google or Facebook). We do not store your OAuth provider password.

2.2 Score Data

Your musical scores are stored in our cloud infrastructure when you are signed in. Scores marked as Private are accessible only to you. Scores marked as Unlisted or Public are accessible to others as described in our terms.

2.3 Usage Data

We use Vercel Analytics to collect anonymous, aggregated usage data (page views, performance metrics). This does not include personally identifiable information and does not use cookies for tracking.

2.4 Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card number or banking details. We receive only a reference to your Stripe customer record.

3. How We Use Your Information

• To provide and maintain the QuickStave service
• To sync your scores across devices
• To process subscription payments
• To send transactional emails (magic links, account notifications)
• To respond to support requests

We do not sell your personal information. We do not send marketing emails unless you explicitly opt in.

4. Data Storage & Security

Your data is stored on secure infrastructure (Fly.io for application servers, PostgreSQL for relational data, Cloudflare R2 for file storage). All data is transmitted over HTTPS. Access to production systems is restricted to authorised personnel.

5. Third-Party Services

We share data with the following services only as necessary:

• Google / Facebook — OAuth authentication
• Stripe — payment processing
• Vercel — website hosting and anonymous analytics
• Cloudflare — CDN and file storage
• Fly.io — API server hosting

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your account and all associated data directly from the app
• Export your scores in standard formats (Pro feature)
• Withdraw consent for optional data processing

You can delete your account from Edit Profile within the app. For other requests, contact us at [email protected].

7. Data Retention

We retain your account data for as long as your account is active. When you delete your account, your personal data, scores, and storage objects are permanently and immediately removed from our systems. Anonymised, aggregated analytics data may be retained indefinitely.

8. Children's Privacy

QuickStave is not directed at children under 13. If you are a school or educator using QuickStave's Team plan for students, you are responsible for obtaining any required parental consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact

For privacy-related questions, contact us at [email protected].