Privacy Policy

1. Who This Policy Covers

We serve two kinds of people:

• Teachers — account holders who sign up for and pay for the Service.
• Students and Parents — individuals whose information is entered into the Service by a Teacher.

Roles under data protection law: For Teacher account data, Musiqstand is the data controller. For Student and Parent data entered into the Service, the Teacher is the data controller and Musiqstand acts as a data processor on the Teacher’s behalf. If you are a Student or Parent, direct questions about your data first to your Teacher; you may also contact us at support@musiqstand.com.

2. Information We Collect

Information Teachers provide

• Account details: first and last name, email address, and primary instrument. Sign-in uses one-time codes sent to your email — we never collect or store passwords.
• Profile details: how long you have been teaching, approximate studio size, timezone, and an optional profile photo
• Payment configuration: Venmo handle, Zelle phone/email, PayPal email or link, and optional payment QR code images
• Rate packages, availability and scheduling preferences, and a referral code
• The version of these policies you accepted at signup, and when you accepted them
• Subscription billing information, processed by Stripe (we never store full card numbers)

Information about Students

Entered by a Teacher:

• Name, email address, phone number, and parent/guardian name
• Age (used, among other things, to identify Students who are minors), instrument, and skill level
• Free-text details the Teacher records, such as notes, previous experience, and intake answers
• Enrollment details: lesson schedule, rate package, trial status, preferred payment method, and start/end dates
• Lesson history: dates, attendance status, payment status, and billing dates

AI features

• The content of lesson-planning assistant conversations: your messages, the assistant’s questions, and the lesson plans it generates
• Usage metadata, including tokens consumed per conversation
• Short AI-generated greeting text shown on your dashboard

The Service does not currently support uploading lesson recordings. If we introduce lesson recording or transcription features, we will update this Policy before collecting that data.

Information collected automatically

• Our own application logs record request routes, timestamps, and error details — not IP addresses or browser details. However, our hosting provider (Cloudflare) records standard request logs, including IP addresses, for security and platform observability.
• Our pages load a font stylesheet from Google Fonts, which means your IP address reaches Google when a page loads.
• Email delivery: we store our email provider’s message IDs solely so scheduled emails can be cancelled. We do not track whether emails are opened.
• Cookies and local storage: we use a cookie to keep you signed in, and our hosting provider sets short-lived cookies to block bots. Your browser also remembers one display setting: whether the sidebar is open, which stays on your device and never reaches us. We use no analytics, advertising, or tracking scripts.

3. How We Use Information and Our Legal Bases

Where a legal basis is required (for example in the EEA/UK), we rely on the following:

• Providing the Service — scheduling, enrollment, payment reminders, lesson reminders — performance of contract
• Sending transactional emails on a Teacher’s behalf — performance of contract; Teacher’s instructions as controller
• Generating AI lesson plans and in-app assistant text — performance of contract
• Processing subscription payments and maintaining billing records — performance of contract; legal obligation
• Security, abuse prevention, usage limits, and service improvement — legitimate interests
• Compliance with law, tax, and accounting requirements — legal obligation

We do not sell personal information. We do not share personal information for targeted or cross-context behavioral advertising. We do not use Student data for marketing. We do not use your content to train AI models.

4. Payments

Musiqstand does not process lesson payments between Students and Teachers. Payment reminder emails sent through the Service state only the amount due and the due date, and replies go directly to the Teacher. A Teacher’s stored payment details (Venmo, Zelle, PayPal, and any QR codes) are visible only to that Teacher in their own settings. Transactions between Student and Teacher occur directly on payment platforms they choose, under those platforms’ own privacy policies. We never receive or store Student payment credentials, and we do not verify that payments occurred.

If we introduce in-app payment collection through Stripe, we will update this Policy before that feature launches.

Teacher subscription fees are processed by Stripe, Inc. Stripe’s privacy policy: stripe.com/privacy

5. Service Providers (Subprocessors)

We share information only with service providers who help us operate the Service:

• Supabase — database hosting and authentication (United States)
• Stripe — subscription billing for Teachers (United States)
• Resend — transactional email delivery (United States)
• Anthropic — AI processing (lesson-planning assistant, dashboard greeting text). Conversation content is sent to Anthropic’s Claude API to generate responses; Anthropic does not train its models on this API data by default (United States)
• Cloudflare — application hosting, storage of uploaded images (profile photos and payment QR codes), scheduled task infrastructure, bot protection, and platform request logs (global edge network)
• GitHub — in-app feedback you submit is stored as issues in a private repository (your account ID, your message, and the page you sent it from) (United States)
• Google Fonts — font delivery; your IP address reaches Google when our pages load (United States)

Each provider is bound by contractual and legal obligations and may only use the data to provide services to us. A current subprocessor list is available on request at support@musiqstand.com.

6. Children's Privacy

Many Students are under 18, and some may be under the age of digital consent in their country (13 in the US; 13–16 across the EEA and UK). We handle this as follows:

• Teachers, not children, hold accounts. Children cannot create accounts on Musiqstand.
• Student information is provided by Teachers. Teachers are responsible for obtaining all necessary consents — including verifiable parental consent where required by law (such as COPPA in the United States or Article 8 GDPR in the EEA) — before entering a child’s information into the Service.
• We use Student data solely to provide the Service to the Teacher. We do not use it for advertising, profiling, or any other purpose.
• Parents may review, correct, or request deletion of their child’s information by contacting their Teacher or emailing us at support@musiqstand.com. We will delete a child’s personal information upon verified parental request, subject to Section 9.

If we learn we have collected a child’s personal information without appropriate consent, we will delete it.

7. AI Features

The Service includes an AI lesson-planning assistant. When a Teacher uses it, the conversation — the Teacher’s messages, relevant student context, and the generated plan — is sent to our AI provider (Anthropic) to produce responses, and is stored with the Teacher’s account. Conversations are subject to technical limits (such as caps on conversation length) to maintain service quality. AI output is reviewed and used at the Teacher’s discretion.

The Service does not currently support lesson recording or transcription. If we introduce features that process recordings of Students, we will update this Policy — including its consent requirements — before those features launch.

8. Your Rights

Depending on where you live, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Colorado Privacy Act, Canada’s PIPEDA, Brazil’s LGPD, and similar laws, including the right to:

• Access the personal information we hold about you, and receive a copy in a portable format
• Correct inaccurate personal information
• Delete your personal information
• Restrict or object to certain processing
• Withdraw consent at any time, where processing is based on consent
• Opt out of sale, sharing, or targeted advertising (we don’t do these, but the right exists)
• Lodge a complaint with your local data protection authority

To exercise these rights, email support@musiqstand.com. We will verify your identity before acting on a request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

If you are a Student or Parent, your Teacher is the controller of your data within the Service; we may forward your request to them, but you may always contact us directly and we will assist.

9. Data Retention

• Account and Student records: retained while the Teacher’s account is active. When a Teacher ends lessons with a Student, that Student’s record and past lesson and payment history are retained unless the Teacher deletes them.
• Account deletion: Teachers can delete their account in account settings. Deletion permanently removes the Teacher’s profile along with their Students, lessons, payment records, and AI conversations. Before deleting your account, cancel any active subscription in account settings.
• Billing and audit records: retained as required for tax, accounting, and legal compliance, even after account deletion.
• AI conversations: retained with the Teacher’s account and deleted with it.
• Email records: we keep only our email provider’s message IDs, so scheduled emails can be cancelled when plans change.

When you request deletion, we delete or de-identify your personal information except where retention is required by law or for the limited purposes above.

10. Security

We use industry-standard safeguards, including encryption in transit and per-account, application-level access controls that scope every request to the signed-in Teacher’s own records. Sign-in uses short-lived one-time codes instead of stored passwords, and bot protection guards the sign-in flow. No system is perfectly secure; we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and, where required, the relevant authorities as required by applicable law.

11. International Data Transfers

Musiqstand is operated from the United States, and your information is stored and processed in the United States and other countries where our service providers operate. These countries may have data protection laws different from those in your country. Where required (for example, for transfers from the EEA, UK, or Switzerland), we rely on appropriate safeguards such as Standard Contractual Clauses entered into with our service providers. You may request more information about these safeguards at support@musiqstand.com.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by email to Teachers or by prominent notice in the Service. The “Last Updated” date reflects the latest revision. Continued use after changes take effect constitutes acceptance.

13. Contact

Quavr LLC
Loveland, Colorado, United States
support@musiqstand.com

If Musiqstand is required to designate a representative in the EEA or UK, their contact details will be listed here.