Legal
Sub-processors
Last updated: 17 October 2026
These are the companies that process personal data for SOUNDAR: labels' and their team members' data, and artists' data. We'll tell labels by email before we add or replace a sub-processor, at least 30 days ahead (section 4 of our Data Processing Agreement).
1. Sub-processors
They process personal data on SOUNDAR's behalf, under contracts that require them to protect it.
| Company | What it does for SOUNDAR | Which data | Where | Privacy terms |
|---|---|---|---|---|
| Scaleway SAS, 8 rue de la Ville-l'Évêque, 75008 Paris, France | Hosting: the servers, the database, demo audio files and the encrypted backups | Everything SOUNDAR stores | France (EU), Paris | Scaleway privacy policy |
| Google (Gmail API), through the label's own Google account | Sending the label's emails to artists from the label's own Gmail address (send-only permission: SOUNDAR can't read the mailbox) | The artist's name and email address, the email's text, the label's sending address | Google's infrastructure, which may include the USA | Google privacy policy |
| Google (Google Workspace) | Sending SOUNDAR's own emails from soundar.app: sign-up codes, password resets, notifications to labels (new demo, daily summary), call bookings | Names and email addresses of labels' team members and of people who book a call | Google's infrastructure, which may include the USA | Google privacy policy |
| Anthropic, PBC (Claude API) | Writing one short opening line in a label's outreach email | The artist's name, recent release title and editorial playlist name; the label's email template and signature | USA | Anthropic privacy policy |
When data leaves the EU (Google, Anthropic), the transfer is covered by the EU–US Data Privacy Framework where the company is certified, or by the European Commission's Standard Contractual Clauses.
2. Data sources
SOUNDAR asks these services about artists: an artist's name or ID goes out, public information comes back. They don't receive labels' data.
| Company | What SOUNDAR reads | Where | Privacy terms |
|---|---|---|---|
| Soundcharts SAS | Music market data: listeners and their growth, releases, playlists, links to official profiles | France (EU) | Soundcharts privacy policy |
| YouTube Data API (Google) | Public channel descriptions and statistics, to find a professional contact email | Google's infrastructure, which may include the USA | Google privacy policy and YouTube Terms of Service |
| Discogs (Zink Media, LLC) | Public artist profiles and their links | USA | Discogs privacy policy |
| MusicBrainz (MetaBrainz Foundation) | Open music database: artist identifiers and official links | USA | MetaBrainz privacy policy |
| Wikidata (Wikimedia Foundation) | Open database: artist identifiers and official links | USA | Wikimedia privacy policy |
| Deezer SA | Public fan counts, for artists a label follows on its watchlist | France (EU) | Deezer privacy policy |
| Last.fm Ltd | Public listener and play counts, for artists a label follows on its watchlist | United Kingdom | Last.fm privacy policy |
3. Not on this list
- Website statistics come from Umami, which we run on our own server in Paris: no outside company sees your visits.
- Fonts are served from our own server, not from Google Fonts.
- Instagram and SoundCloud aren't used.
4. Changes
We'll notify labels of changes by email, at least 30 days before a new sub-processor starts, and update this page. Questions: privacy@soundar.app.