MoonsongSubprocessors
The companies that help us run Moonsong, what each one does, and where they process data.
Current list
| Provider | Role | Purpose | Data involved | Location |
|---|---|---|---|---|
| Cloudflare | Processor | Hosting of the Moonsong service and website (Workers), database (D1), private file storage (R2), network security, and delivery of sign-in emails | All account and project data; sign-in emails | Global network, including the United States |
| OpenRouter | Processor | Routes AI requests (lyric help, style analysis, music, covers and safety checks) to model providers, using only routes that do not collect data for training | Content of the AI requests you make | United States |
| Model provider, directly (paid AI service; prompts and outputs are not used to improve Google's products) and via OpenRouter as a backup | Music generation | Approved lyrics, Song Blueprint and, for Song from a photo, the chosen photo; returns audio | United States and other Google locations | |
| OpenAI | Model provider via OpenRouter | Lyric drafts and revisions, and style analysis for "Song like…" | Your idea, instruction and the lyric sections to work on; for style analysis, the titles, artists, genres and years of the references you confirmed and any hum measurements (numbers only); returns a Style Profile of generic descriptors | United States |
| Typesafe | Model provider via OpenRouter | Automated safety and policy classification of text | The text of each AI request, including the Style Profile text from style analysis | Outside the EU/EEA may apply |
| Black Forest Labs | Model provider via OpenRouter | Cover images | Image description based on your project; returns an image | Outside the EU/EEA may apply |
| Apple | Independent controller | App Store sales, payments, subscriptions, refunds and purchase restoration | Purchase and subscription data; we receive transaction identifiers and status | Ireland, the United States and other Apple locations |
| Google (Google Play) | Independent controller | Google Play sales, payments, subscriptions, refunds and purchase restoration in the Android app | Purchase and subscription data; we receive order identifiers, purchase tokens and status, and the app gives Google Play your Moonsong account identifier with a purchase | Ireland, the United States and other Google locations |
| Spotify (Spotify AB) | Independent service (public lookup) | "Song like…": looks up the public details of Spotify links you share, with the Spotify Web API where we have set it up, otherwise Spotify's oEmbed service | The link only, sent from our server; returns public track details | Sweden and other Spotify locations |
| Google (YouTube) | Independent service (public lookup) | "Song like…": looks up the public details of YouTube and YouTube Music links you share, with YouTube's oEmbed service, or the YouTube Data API for playlists where we have set it up | The link only, sent from our server; returns public video or playlist details | United States and other Google locations |
| SoundCloud (SoundCloud Global Limited & Co. KG) | Independent service (public lookup) | "Song like…": looks up the public details of SoundCloud links you share, with SoundCloud's oEmbed service | The link only, sent from our server; returns public track details | Germany and other SoundCloud locations |
| Apple (iTunes Search and Lookup API) | Independent service (public lookup) | "Song like…": searches for song names you type, and looks up Apple Music song and album links when they can't be read on your iPhone | The search text or link only, sent from our server; returns public track details | United States and other Apple locations |
| Apple (ShazamKit and MusicKit) | Independent service the app uses on your iPhone | "Song like…": ShazamKit recognises a song playing nearby when you tap Listen; MusicKit reads track names, artists and genres from Apple Music links. Both run on your iPhone under your own relationship with Apple | ShazamKit: an audio signature (a fingerprint of the sound, not a recording), sent by your iPhone directly to Apple. MusicKit: your Apple Music request. Moonsong receives only the resulting track details | United States and other Apple locations |
Model providers receive content only after you allow AI processing in the app, and only for the action you request. They operate under their own terms and may keep data for safety and abuse monitoring under their own retention policies. Transfers outside the EU/EEA are covered as described in the Privacy Notice.
Spotify, Google (YouTube), SoundCloud and Apple's iTunes Search and Lookup API are used only when you use "Song like…" with a link or a song name. They answer public lookups under their own terms and privacy policies, and receive only the link or search text from our server, never your email address, account ID or any other identifier. We keep only the title, artist, genres and year of each track. ShazamKit and MusicKit are Apple services that work on your iPhone; Moonsong does not receive the audio or the audio signature. See Song like… and the microphone.
Changes to this list
We update this page, including the date and version at the top, before a new provider starts processing personal data for Moonsong. If a change materially affects how your data is handled, we also tell you in the app. Questions: support@sansavision.com.