Availo Privacy Policy

Information You Provide

• Account registration details (name, email address, business name)
• Service configuration data (business hours, services offered, availability settings, decision-flow rules)
• Booking and lead information submitted through widgets (name, email, phone number, address, and responses to decision-flow questions)
• Communications you send to us (support requests, feedback)

Information Collected Automatically

• Device and browser information (IP address, browser type, operating system)
• Usage data (pages viewed, features used, widget interactions, timestamps)
• Cookies and similar tracking technologies (see Section 5)

Information from Third-Party Integrations

• Google Calendar data: When you connect your Google Calendar, we access calendar event data (event titles, times, and attendee information) to manage availability and create booking events. We request read, write, and calendar management permissions.
• Future integrations (e.g., Stripe for payment processing) may involve additional data as described at the time of connection.

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service
• To process and manage bookings and leads
• To sync availability and create events via connected calendar integrations
• To send transactional communications (booking confirmations, appointment reminders, account notifications)
• To provide customer support and respond to inquiries
• To improve and develop the Service
• To detect and prevent fraud, abuse, or security issues
• To comply with legal obligations

We do not sell your personal information. We may share information in the following circumstances:

• Service providers: We use third-party services to operate the Service, including Supabase (database and authentication), Vercel and Render (hosting), Upstash (caching), and Resend (email delivery). These providers process data on our behalf and are contractually obligated to protect it.
• Google APIs: Calendar data is shared with Google when you connect your Google Calendar. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
• Future payment processors: If and when payment processing is enabled, payment information will be handled by Stripe or a similar PCI-compliant third-party processor. We will not store credit card numbers directly.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or government request.
• With your consent: We may share information for other purposes with your explicit consent.

Availo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google Calendar data to provide and improve the booking and availability features you have connected.
• We do not use Google user data for advertising purposes.
• We do not sell Google user data to third parties.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• Human access to Google user data is limited to what is necessary for debugging, support (at your request), legal compliance, or security purposes.

We use cookies and similar technologies to maintain session state, remember preferences, and understand how the Service is used. The embeddable widget may use local storage or session cookies to support the booking flow experience. You can manage cookie preferences through your browser settings, though disabling cookies may affect Service functionality.

We retain your information for as long as your account is active or as needed to provide the Service. Booking and lead data is retained for the duration of the associated organization's account. If you request account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), secure authentication via Supabase, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights regarding your personal information, including:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate information.
• Deletion: Request deletion of your personal information.
• Disconnection: Revoke access to connected integrations (e.g., Google Calendar) at any time through your account settings or via the third-party platform.

To exercise these rights, contact us at privacy@availo.co.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 16, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us at:

Thousand Hills Ventures LLC (d/b/a Availo)
Email: privacy@availo.co
Website: https://availo.co