Privacy Policy

Cantus ("we," "us," "the service") is operated by Moore Piano Services / Petra Moore LLC, based in Greenwood, South Carolina. This policy explains what data Cantus collects and how it's used, for both subscribers ("you," the piano technician using Cantus) and the client data you store within it.

What we collect

• Account data: your name, email address, and business information you provide at signup and in your business profile settings.
• Business data you enter: your clients' names, contact information, addresses, piano details, service history, appointment records, notes, photos, and audio recordings you capture in the app.
• Payment data: subscription and invoice payments are handled entirely by Stripe. We never see, store, or have access to your credit card details or your clients' credit card details.
• Usage data: basic technical logs (login times, error reports) to keep the service reliable. We do not track your behavior for advertising purposes.

How we use it

• To provide and maintain the service — storing, syncing, and displaying your data back to you.
• To send you service-related communications (billing notices, outage notifications, feature updates).
• To send automated reminders and review requests to your clients on your behalf, only when you have explicitly enabled these features in your Settings.
• We do not sell your data or your clients' data, and we do not use it for advertising.

Who can see your data

• Only you. Each Cantus account's data is fully isolated at the database level — no other subscriber can access your clients, appointments, invoices, or files.
• Your clients can see limited, read-only information about their own piano(s) if you share a client-view link with them. This shows only their piano's service dates, condition trends, photos, and any open invoice — never another client's data, and never your business financials or internal notes.
• Cantus staff (currently the developer) may access account data only to provide support you request or to investigate a technical problem. We will never browse your data out of curiosity.
• We use Supabase (database and file storage), Netlify (hosting), Stripe (payments), and Resend (email delivery) as infrastructure providers. They process data on our behalf under their own security and privacy commitments, not for their own purposes.

Your clients' data

You are the data controller for the client information you enter into Cantus — meaning you are responsible for having a lawful basis to collect and store it (which, as their piano technician providing a requested service, you do) and for honoring any requests from your clients about their own information. Cantus is the data processor: we store and protect it on your behalf, and we do not use it for any purpose other than providing the service to you.

Automated communications

When you enable reminders, postcard follow-ups, or review requests in your Settings, Cantus sends messages to your clients on your behalf. These messages use your business name and reply-to email address, not Cantus's. Your clients' replies go directly to you. You can disable any of these features at any time by unchecking the relevant toggle in Settings, and automated sending stops immediately.

Data retention & deletion

Your data remains in Cantus as long as your account is active. If you cancel your subscription, we retain your data for 30 days in case you choose to reactivate, then permanently delete it. You can request a full export of your data at any time using the built-in backup feature (Settings → Backup & restore), or request a complete account deletion by contacting support@getcantus.com.

Security

All data is encrypted in transit (TLS) and at rest. Access to your account requires your login credentials. Media files (photos, audio recordings) are stored in a private cloud bucket accessible only to your account through time-limited signed URLs. Row-level security policies enforce data isolation at the database level — this is not just application logic but a database-enforced boundary.

Changes to this policy

We will notify active subscribers by email before material changes to this policy take effect. Continued use of the service after notification constitutes acceptance of the updated policy.

Contact

Questions about this policy or your data: support@getcantus.com