Privacy Policy

1. Who This Policy Covers

We serve two kinds of people:

• Teachers — account holders who sign up for and pay for the Service.
• Students and Parents — individuals whose information is entered into the Service by a Teacher.

Roles under data protection law: For Teacher account data, Musiqstand is the data controller. For Student and Parent data entered into the Service, the Teacher is the data controller and Musiqstand acts as a data processor on the Teacher’s behalf. This includes information a Student or Parent submits themselves through a Teacher’s public booking page: the Teacher is likewise the controller of that information, and we process it on the Teacher’s behalf. If you are a Student or Parent, direct questions about your data first to your Teacher; you may also contact us at support@musiqstand.com.

2. Information We Collect

Information Teachers provide

• Account details: first and last name, email address, and primary instrument. Sign-in uses one-time codes sent to your email — we never collect or store passwords.
• Profile details: how long you have been teaching, approximate studio size, timezone, and an optional profile photo
• An optional mobile phone number and your preferred contact channel (email or text message), and — if you opt in to receive text messages — a consent record: whether and when consent was given or revoked, and the IP address the opt-in was submitted from, kept as evidence of the consent
• Payment configuration: Venmo handle, Zelle phone/email, PayPal email or link, and optional payment QR code images
• Rate packages, availability and scheduling preferences, and a referral code
• The version of these policies you accepted at signup, and when you accepted them
• Subscription billing information, processed by Stripe (we never store full card numbers)

Information about Students

Entered by a Teacher, or submitted directly by a Student or Parent through a Teacher’s public booking page:

• Name, email address, phone number, and parent/guardian name
• Age (used, among other things, to identify Students who are minors), instrument, and skill level
• Free-text details the Teacher records, such as notes, previous experience, and intake answers
• Enrollment details: lesson schedule, rate package, trial status, preferred payment method, and start/end dates
• Lesson history: dates, attendance status, payment status, and billing dates
• Text message (SMS) consent records: whether and when consent to receive text messages was given or revoked, how it was given (directly by the Student or Parent, or recorded by the Teacher on their behalf, and by which Teacher), and — for consent given through the public booking page — the IP address it was submitted from, kept as evidence of the consent

AI features

• The content of lesson-planning assistant conversations: your messages, the assistant’s questions, and the lesson plans it generates
• Usage metadata, including tokens consumed per conversation
• Short AI-generated greeting text shown on your dashboard

The Service does not currently support uploading lesson recordings. If we introduce lesson recording or transcription features, we will update this Policy before collecting that data.

Information collected automatically

• Our own application logs record request routes, timestamps, and error details — not IP addresses or browser details. The exceptions are the IP addresses stored with text message consents — a Student’s or Parent’s opt-in submitted through a booking page, or a Teacher’s own opt-in — described above. However, our hosting provider (Cloudflare) records standard request logs, including IP addresses, for security and platform observability.
• Our pages load a font stylesheet from Google Fonts, which means your IP address reaches Google when a page loads.
• Email delivery: we store our email provider’s message IDs solely so scheduled emails can be cancelled. We do not track whether emails are opened.
• Cookies and local storage: we use a cookie to keep you signed in, and our hosting provider sets short-lived cookies to block bots. Your browser also remembers one display setting: whether the sidebar is open, which stays on your device and never reaches us. We use no analytics, advertising, or tracking scripts.

3. How We Use Information and Our Legal Bases

Where a legal basis is required (for example in the EEA/UK), we rely on the following:

• Providing the Service — scheduling, enrollment, payment reminders, lesson reminders — performance of contract
• Sending transactional messages (email and text message) on a Teacher’s behalf — performance of contract; Teacher’s instructions as controller
• Sending lesson and payment reminder text messages to Students who have consented to receive them — consent; Teacher’s instructions as controller
• Sending service text messages about a Teacher’s own studio (lesson activity, payment alerts, and account notifications) to Teachers who have opted in to receive them — consent
• Generating AI lesson plans and in-app assistant text — performance of contract
• Processing subscription payments and maintaining billing records — performance of contract; legal obligation
• Security, abuse prevention, usage limits, and service improvement — legitimate interests
• Compliance with law, tax, and accounting requirements — legal obligation

We do not sell personal information. We do not share personal information for targeted or cross-context behavioral advertising. We do not use Student data for marketing. We do not use your content to train AI models.

4. Text Messaging (SMS)

With consent, we send text messages through our delivery provider, Twilio. Students and Parents who opt in receive lesson reminders (about one hour before a lesson) and payment reminders (about 24 hours before a payment is due) on their Teacher’s behalf. Teachers who opt in receive alerts about their own studio: lesson activity, payment alerts, and account notifications. We never send marketing or third-party content by text message.

Message frequency varies based on your lesson and billing schedule. Message and data rates may apply.

Mobile phone numbers and text messaging opt-in data and consent are never shared with, or sold to, third parties or affiliates for marketing or promotional purposes. The only exception is that recipient phone numbers and message content pass to Twilio, our SMS delivery provider, solely to deliver the messages (see Section 6, Service Providers).

You can opt out at any time by replying STOP to any message, or reply HELP for help. Teachers can also stop texts by unchecking the SMS consent box in account settings, and Students and Parents can ask their Teacher to revoke SMS consent in the Service.

5. Payments

Musiqstand does not process lesson payments between Students and Teachers. Payment reminder emails sent through the Service state only the amount due and the due date, and replies go directly to the Teacher. A Teacher’s stored payment details (Venmo, Zelle, PayPal, and any QR codes) are visible only to that Teacher in their own settings. Transactions between Student and Teacher occur directly on payment platforms they choose, under those platforms’ own privacy policies. We never receive or store Student payment credentials, and we do not verify that payments occurred.

If we introduce in-app payment collection through Stripe, we will update this Policy before that feature launches.

Teacher subscription fees are processed by Stripe, Inc. Stripe’s privacy policy: stripe.com/privacy

6. Service Providers (Subprocessors)

We share information only with service providers who help us operate the Service:

• Supabase — database hosting and authentication (United States)
• Stripe — subscription billing for Teachers (United States)
• Resend — transactional email delivery (United States)
• Twilio — text message (SMS) delivery; processes recipient phone numbers and message content to deliver messages (United States)
• Anthropic — AI processing (lesson-planning assistant, dashboard greeting text). Conversation content is sent to Anthropic’s Claude API to generate responses; Anthropic does not train its models on this API data by default (United States)
• Cloudflare — application hosting, storage of uploaded images (profile photos and payment QR codes), scheduled task infrastructure, bot protection, and platform request logs (global edge network)
• GitHub — in-app feedback you submit is stored as issues in a private repository (your account ID, your message, and the page you sent it from) (United States)
• Google Fonts — font delivery; your IP address reaches Google when our pages load (United States)

Each provider is bound by contractual and legal obligations and may only use the data to provide services to us. A current subprocessor list is available on request at support@musiqstand.com.

7. Children's Privacy

Many Students are under 18, and some may be under the age of digital consent in their country (13 in the US; 13–16 across the EEA and UK). We handle this as follows:

• Teachers, not children, hold accounts. Children cannot create accounts on Musiqstand.
• Student information is provided by Teachers. Teachers are responsible for obtaining all necessary consents — including verifiable parental consent where required by law (such as COPPA in the United States or Article 8 GDPR in the EEA) — before entering a child’s information into the Service.
• We use Student data solely to provide the Service to the Teacher. We do not use it for advertising, profiling, or any other purpose.
• Parents may review, correct, or request deletion of their child’s information by contacting their Teacher or emailing us at support@musiqstand.com. We will delete a child’s personal information upon verified parental request, subject to Section 10.

If we learn we have collected a child’s personal information without appropriate consent, we will delete it.

8. AI Features

The Service includes an AI lesson-planning assistant. When a Teacher uses it, the conversation — the Teacher’s messages, relevant student context, and the generated plan — is sent to our AI provider (Anthropic) to produce responses, and is stored with the Teacher’s account. Conversations are subject to technical limits (such as caps on conversation length) to maintain service quality. AI output is reviewed and used at the Teacher’s discretion.

The Service does not currently support lesson recording or transcription. If we introduce features that process recordings of Students, we will update this Policy — including its consent requirements — before those features launch.

9. Your Rights

Depending on where you live, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Colorado Privacy Act, Canada’s PIPEDA, Brazil’s LGPD, and similar laws, including the right to:

• Access the personal information we hold about you, and receive a copy in a portable format
• Correct inaccurate personal information
• Delete your personal information
• Restrict or object to certain processing
• Withdraw consent at any time, where processing is based on consent. Students can stop text messages at any time by replying STOP to any message, or by asking their Teacher to revoke SMS consent in the Service. Teachers can stop text messages by replying STOP or by unchecking the SMS consent box in account settings
• Opt out of sale, sharing, or targeted advertising (we don’t do these, but the right exists)
• Lodge a complaint with your local data protection authority

To exercise these rights, email support@musiqstand.com. We will verify your identity before acting on a request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

If you are a Student or Parent, your Teacher is the controller of your data within the Service; we may forward your request to them, but you may always contact us directly and we will assist.

10. Data Retention

• Account and Student records: retained while the Teacher’s account is active. When a Teacher ends lessons with a Student, that Student’s record and past lesson and payment history are retained so the Teacher’s business records stay complete.
• SMS consent records: retained, including after consent is revoked, as evidence of the consent history. Revoking consent closes out the record rather than erasing it.
• Account deletion: Teachers can delete their account in account settings. Deletion permanently removes the Teacher’s profile along with their Students, lessons, payment records, and AI conversations. Before deleting your account, cancel any active subscription in account settings.
• Billing and audit records: retained as required for tax, accounting, and legal compliance, even after account deletion.
• AI conversations: retained with the Teacher’s account and deleted with it.
• Email records: we keep only our email provider’s message IDs, so scheduled emails can be cancelled when plans change.

When you request deletion, we delete or de-identify your personal information except where retention is required by law or for the limited purposes above.

11. Security

We use industry-standard safeguards, including encryption in transit and per-account, application-level access controls that scope every request to the signed-in Teacher’s own records. Sign-in uses short-lived one-time codes instead of stored passwords, and bot protection guards the sign-in flow. No system is perfectly secure; we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and, where required, the relevant authorities as required by applicable law.

12. International Data Transfers

Musiqstand is operated from the United States, and your information is stored and processed in the United States and other countries where our service providers operate. These countries may have data protection laws different from those in your country. Where required (for example, for transfers from the EEA, UK, or Switzerland), we rely on appropriate safeguards such as Standard Contractual Clauses entered into with our service providers. You may request more information about these safeguards at support@musiqstand.com.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by email to Teachers or by prominent notice in the Service. The “Last Updated” date reflects the latest revision. Continued use after changes take effect constitutes acceptance.

14. Contact

Quavr LLC
Loveland, Colorado, United States
support@musiqstand.com

If Musiqstand is required to designate a representative in the EEA or UK, their contact details will be listed here.