Trust & Privacy

Sub-processors

Last updated: 9-21-25

Shedthemusic LLC (“Shedthemusic”, “we”, “us”) uses a small set of third-party providers (“sub-processors”) to host our website and manage access to our curriculum. These providers may process limited contact information about school staff or admins only (for example, work name and email) so we can operate the service.

No student personal information: Our service is designed so schools do not upload student PII to Shedthemusic. Students access materials using a shared, generic school username (not tied to an individual). We do not create individual student accounts.

Current sub-processors

Infrastructure & application platform

Vendors that host or secure the website and member access.
Sub-processor Purpose Categories of data Processing locations Applicable regions Notes
Squarespace, Inc. — privacy Website hosting, content delivery, built-in analytics, web forms Site usage metadata (IP, device/browser), form submissions from staff (name, work email), license/access details Primarily United States (global CDN) All customers Hosts shedthemusic.net and curriculum pages. No individual student accounts or uploads.
MemberSpace, Inc. — privacy Membership & access management (locks content, manages school access), account emails School admin/teacher account data (name, work email), access logs, hashed credentials; no student PII United States All customers Controls member-only areas. No student messaging or social features.

Payments & business operations

Vendors that process payments or business communications.
Sub-processor Purpose Categories of data Processing locations Applicable regions Notes
Stripe, Inc. — privacy Payment processing for card transactions Payer name, email, billing details, tokenized card data (stored by Stripe) Global (primarily United States; varies by network) Not used for Australia or New Zealand customers AU/NZ schools are invoiced via alternative methods; no Stripe processing for AU/NZ.
Google LLC (Google Workspace) — privacy Business email & file storage (e.g., purchase orders, support emails) Contact details contained in communications from school staff United States/EU (may involve international transfer) All customers (for support/ops) Used for support and routine business communications—not for hosting curriculum content.

Vendors of our vendors

Squarespace and MemberSpace may use their own sub-processors (e.g., CDN, email delivery). Those providers act as their sub-processors, not Shedthemusic’s. See their public notices for details.

Data residency & student data

  • We design our service so schools do not upload student personal information to Shedthemusic.
  • Students access materials via a shared, generic username per school; we do not collect student names, emails, or unique identifiers.

Updates to this list

We will update this page when sub-processors change. For Australia/New Zealand schools, we provide at least 30 days’ notice before adding a new sub-processor that will process AU/NZ customer data, except where an urgent change is required for security or service continuity.

Questions or objections

Email support@shedthemusic.net with the subject line “Sub-processor Inquiry”.