Sub-processors
These are the third parties that process data on our behalf in order to run QuickStave. There are seven, and the list is deliberately short.
1. Current sub-processors
| Provider | What it does | Data involved | Where |
|---|---|---|---|
| Fly.io | API server hosting and the PostgreSQL database | Account records, score metadata, score data | London (lhr) region |
| Cloudflare | Object storage (R2) for score files, and CDN | Score files and associated assets | Global |
| Vercel | Website and editor hosting, plus anonymous usage analytics | Request metadata; analytics are aggregated and not personally identifying | Global |
| Stripe | Payment processing and subscription billing | Name, email, billing address, payment details (held by Stripe, not by us) | Global |
| Resend | Transactional email — sign-in links and account notices | Email address and message content | Global |
| Optional OAuth sign-in | Email address, display name, profile picture — only if you choose Google sign-in | Global | |
| Meta (Facebook) | Optional OAuth sign-in | Email address, display name, profile picture — only if you choose Facebook sign-in | Global |
2. What is not on this list
Optical Music Recognition uses no sub-processor at all. Scanning runs entirely in your browser on your own device. The sheet music you scan is never uploaded to us or to anyone else, which is both a privacy property and the reason scanning is free.
We do not use advertising networks, marketing automation platforms, session recording, or third-party behavioural analytics. Our analytics are Vercel's aggregate page metrics, which do not identify individuals and do not use tracking cookies.
No provider on this list is permitted to use your scores for their own purposes, and we do not send your content to any machine-learning training service.
3. Changes to this list
We will update this page when a sub-processor is added or removed, and record the change in the change history.
If you are a Team or institutional customer and need advance notice of changes in writing, contact [email protected] — we can include that commitment in a data processing agreement.
4. Related
Our Privacy Policy explains what we collect and why, and how to request a copy of your data or have it deleted.
Questions about this document? [email protected]. See also our Terms of Service, Acceptable Use Policy, Refund & Cancellation Policy, Copyright & Takedown Policy, Sub-processors, and Privacy Policy.