Sub-processors

1. About this list

To run the Platform we use a small set of third-party providers (“sub-processors”) that process data on our behalf. We keep the number small on purpose. Each is bound by a data-processing agreement, is used only for the purpose stated, and is expected to meet security and confidentiality obligations consistent with this Privacy Policy.

This page is the current, canonical list. It covers processing of your account and operational personal data; it does not expand any rights to the music-industry catalog data the API serves, which remains governed by the Data License Agreement.

2. Current sub-processors

Each entry states the provider, what it does for us, and where it primarily processes data:

• Stripe, Inc. — payment processing, cards, and invoicing — United States.
• Klaviyo, Inc. — delivery of transactional and service email on our behalf — United States.
• Cloudflare, Inc. — edge network, CDN, WAF, and bot mitigation in front of the Platform — global edge (primary processing United States).
• Sentry (Functional Software, Inc.) — error and performance diagnostics, when enabled, scrubbed of secrets and message bodies — United States.
• OVHcloud (US LLC) — the managed infrastructure that hosts the Platform — United States (Vint Hill, Virginia).

3. Muso-operated services

Muso Sign-In (login.muso.ai) is operated by MUSO.AI itself, not a third party, and is therefore not a sub-processor. If you choose to sign in with Google, Apple, or Facebook, that provider processes the sign-in you initiate under its own terms; we receive only the basic profile fields you approve.

4. Changes and notice

When we add or replace a sub-processor, we update this page and revise the “Last updated” date above. If you would like to be notified in advance of changes to this list — for example, as part of an enterprise data-processing agreement — email legal@muso.ai and we will add you to the notification list.