Draft. This page is a scaffold pending legal review and confirmed entity details. Placeholders are marked [TODO].
Subprocessors
The third parties Muzings uses to process user data. Each is engaged under contract and only for the purpose shown.
Last updated: [TODO]
This list is referenced from our Privacy Policy.
| Subprocessor | Purpose | Data shared | Region |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting — compute (EC2), database (RDS PostgreSQL), object storage (S3), auth + transactional auth email (Cognito), queues (SQS), functions (Lambda); and PII detection (Comprehend), which analyses note content to find personal identifiers so they can be masked before text-generation AI calls. | All application data: account identifiers, content, uploads, logs. Note content is also sent to Comprehend for personal-identifier detection. | us-east-2 (Ohio, USA) |
| Cloudflare, Inc. | Authoritative DNS for muzings.ai. | DNS query metadata only. No account content. | Global (anycast) |
| Google LLC | Optional “Sign in with Google” federation via Cognito; and live voice‑to‑text via Chrome’s built‑in Web Speech API — a real‑time preview while you speak on desktop Chrome, and the primary transcriber for voice capture on Android. | For Google sign‑in: your email address and Google account identifier. For voice capture in Chrome / on Android: the audio you speak, sent to Google’s speech‑recognition service to produce the live transcript. | Global |
| Let’s Encrypt (ISRG) | TLS certificate issuance for muzings.ai domains. | Domain names only. No user data. | USA |
| Anthropic, PBC | AI text generation — capture classification/filing, chat answers, and enrichment of unfamiliar terms. For enrichment, Anthropic also performs a web search: a query derived from the note is sent to Anthropic and its search provider to identify unfamiliar named entities. | The note content you submit for AI features, and — for enrichment — search queries derived from it. Not used to train AI models (API inputs/outputs are excluded from model training); processed under provider data-processing terms. | USA |
| OpenAI, L.L.C. | AI embeddings (semantic recall) on all platforms, and server‑side voice‑note transcription for captures made in a desktop browser. | Note content (for embeddings) and, on desktop, the audio you record (for transcription). On mobile, voice is transcribed by the device’s built‑in speech service instead (see Google / Apple), not by OpenAI. Not used to train AI models (API data is excluded from training); processed under provider data‑processing terms. | USA |
| Apple Inc. | Live voice‑to‑text via Safari’s built‑in Web Speech API — the primary transcriber for voice capture on iOS and iPadOS. | For voice capture in Safari on iOS / iPadOS: the audio you speak, sent to Apple’s speech‑recognition service to produce the transcript. | USA |
Change notice
We intend to give at least 30 days’ notice before adding or replacing a subprocessor, so customers can review the change and object if needed. [TODO: confirm how change notices will be communicated — for example email or a subscribe option on this page.]