Sub-processors
This page lists the third-party service providers ("sub-processors") that process personal data on behalf of Island Breeze Affiliates Inc. (d/b/a IBA Music) to deliver the IBA Companion app, the IBA Music admin dashboard, and related web tools. IBA Music remains the data controller for all personal data described in our Privacy Policy. Each sub-processor listed here acts only on IBA Music's documented instructions and is bound by a contract consistent with Article 28 of the EU GDPR (or the closest analogous US requirements where GDPR does not directly apply).
If we add or remove a sub-processor, the change is reflected here and in Privacy Policy §7. The Privacy Policy is the authoritative statement of how IBA Music collects and uses your information; this page exists to make the sub-processor list easy to consume on its own.
Current sub-processors
| Provider | Purpose | Data location | Legal link |
|---|---|---|---|
| Apple Inc. | Apple Push Notification service (APNs); Sign in with Apple; EventKit framework for on-device Apple Calendar sync | USA, global edge | apple.com/legal/privacy |
| Google LLC | Google Calendar API (opt-in, calendar.app.created scope only); Google Sign-In; Firebase Cloud Messaging for Android push |
USA, global edge | policies.google.com/privacy |
| Microsoft Corporation | Microsoft Azure Active Directory and Microsoft Graph — used on the IBA Music admin side to sync performance bookings with IBA Music staff Outlook calendars. Not used in the IBA Companion musician-facing app. | USA, global edge | privacy.microsoft.com |
| Cloudflare, Inc. | Edge hosting for admin.ibamusic.com and related tools; Cloudflare D1 database storage; Cloudflare R2 object storage for receipt images; Cloudflare Pages hosting for this legal subdomain | USA, global edge | cloudflare.com/privacypolicy |
All listed providers process personal data only as needed to provide the services described above. None of them are authorized to use IBA Music user data for their own advertising, analytics, or product-development purposes.
What is not here
IBA Music does not use:
- Any advertising networks
- Any mobile ad SDKs (Google Ads, Meta Audience Network, AppLovin, Unity Ads, etc.)
- Any analytics SDKs (Firebase Analytics, Amplitude, Mixpanel, Segment, Hotjar, etc.)
- Any crash-reporting SDK other than Apple App Store Connect and Google Play Console native channels
- Any data broker or CRM enrichment provider
- Any generative-AI provider in a user-facing decision path
If any of those facts change, we will update this page before the change takes effect.
Changes
When we add, remove, or materially change the scope of a sub-processor, we update this page and the Privacy Policy. The "Last updated" date in the footer is pulled automatically from the git commit history of this file so you can verify the last time it changed.
Questions
Email privacy@ibamusic.com.