Legal

Privacy Policy

Last updated: October 5, 2026 · Takes effect October 14, 2026. Until then, the previous version applies.

Cantus ("we," "us," "the service") is operated by Moore Piano Services / Petra Moore LLC, based in Greenwood, South Carolina. This policy explains what data Cantus collects and how it's used, for both subscribers ("you," the piano technician using Cantus) and the client data you store within it.

What we collect

Account data: your name, email address, and business information you provide at signup and in your business profile settings.
Business data you enter: your clients' names, contact information, addresses, piano details, service history, appointment records, notes, photos, and audio recordings you capture in the app.
Payment data: subscription and invoice payments are handled entirely by Stripe. We never see, store, or have access to your credit card details or your clients' credit card details.
Online booking data: if you turn on online booking, the details your clients enter on your booking page (name, phone, email, address, piano and service details, and notes) are saved to your account as a booking. Starting October 21, 2026, to limit misuse of the booking page, we keep a short-lived, one-way scrambled code derived from the visitor's IP address, never the IP address itself.
Usage data: basic technical logs (such as login times) and error reports, which we collect with Sentry to find and fix problems. An error report describes what went wrong and where in the app it happened. We do not track your behavior for advertising purposes.

How we use it

To provide and maintain the service — storing, syncing, and displaying your data back to you.
To send you service-related communications (billing notices, outage notifications, feature updates).
To send automated reminders and review requests to your clients on your behalf, only when you have explicitly enabled these features in your Settings.
To send booking confirmations to your clients and booking notifications to you, when you use online booking.
To locate addresses and calculate driving distances and routes for mileage and route planning, and, starting October 21, 2026, to suggest addresses as you type and check your online booking service area.
We do not sell your data or your clients' data, and we do not use it for advertising.

Who can see your data

Only you. Each Cantus account's data is fully isolated at the database level — no other subscriber can access your clients, appointments, invoices, or files.
Your clients can see limited, read-only information about their own piano(s) if you share a client-view link with them. This shows only their piano's service dates, condition trends, photos, and any open invoice — never another client's data, and never your business financials or internal notes. If you send a client an estimate, they can view it and approve or decline it online; an approval records the name they type, the option they choose, and the date, time, device, and IP address used.
Starting October 21, 2026, returning clients on your booking page who enter the name and phone number you have on file can see the contact details and address you have for them and the pianos on file (make, model, type, and location only, never serial numbers or notes), and can update their own contact details while booking.
Cantus staff may access account data only to provide support you request or to investigate a technical problem. We will never browse your data out of curiosity.
We use Supabase (database and file storage), Netlify (hosting), Stripe (payments), Resend (email delivery), and Sentry (error reports) as infrastructure providers. They process data on our behalf under their own security and privacy commitments, not for their own purposes.
Map services: to suggest addresses and calculate locations, driving distances, and routes, Cantus sends the address text or map coordinates being looked up to OpenStreetMap-based services (Nominatim and OSRM) and, starting October 21, 2026, to Google Maps Platform, with the OpenStreetMap-based services as a fallback. These services receive only the address or coordinates, never your clients' names or other details.

Your clients' data

You are the data controller for the client information you enter into Cantus — meaning you are responsible for having a lawful basis to collect and store it (which, as their piano technician providing a requested service, you do) and for honoring any requests from your clients about their own information. Cantus is the data processor: we store and protect it on your behalf, and we do not use it for any purpose other than providing the service to you.

Automated communications

When you enable reminders, postcard follow-ups, or review requests in your Settings, Cantus sends messages to your clients on your behalf. These messages use your business name and reply-to email address, not Cantus's. Your clients' replies go directly to you. You can disable any of these features at any time by unchecking the relevant toggle in Settings, and automated sending stops immediately.

Where your data is stored

Cantus data is stored in the United States. If you or your clients are outside the United States, your data is transferred to and stored in the United States.

Data retention & deletion

Your data remains in Cantus as long as your account is active. If you cancel your subscription, we retain your data for 30 days in case you choose to reactivate, then permanently delete it. You can download a full copy of your data at any time from Settings → Backup & restore: the backup file contains all your records and settings, and the photos and recordings download contains your media files. To delete your account, use Delete account in Settings, which sends a deletion request to support@getcantus.com, or email us directly; we confirm by email once your data is deleted.

Security

All data is encrypted in transit (TLS) and at rest. Access to your account requires your login credentials. Media files (photos, audio recordings) are stored in a private cloud bucket accessible only to your account through time-limited signed URLs. Row-level security policies enforce data isolation at the database level — this is not just application logic but a database-enforced boundary.

Changes to this policy

We will notify active subscribers by email before material changes to this policy take effect. Continued use of the service after notification constitutes acceptance of the updated policy.

Contact

Moore Piano Services / Petra Moore LLC
PO Box 49068, Greenwood, SC 29649

Questions about this policy or your data: support@getcantus.com