Last updated: June 4, 2026
Avayble ("we," "our," or "us") operates a scheduling platform for independent massage providers and their clients. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, web application, and related services (collectively, the "Service").
We collect information that you provide directly to us when you create an account, book an appointment, or communicate with us:
We also collect certain information automatically when you use the Service:
We use the information we collect to:
We do not use your personal information for advertising, marketing to third parties, or profiling.
We do not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:
Avayble offers an opt-in SMS program for transactional appointment communications. When you opt in, you agree to receive automated text messages for:
Opt-In: SMS consent is collected during account signup, provider onboarding, or client account claim, when you check a clearly labeled SMS consent checkbox. Your consent status is stored on your account and verified before every message is sent. Consent is voluntary and is not a condition of using the Service.
Opt-Out: You can stop receiving SMS messages at any time by:
Help: Reply HELP to any message for assistance, or contact us at the email listed below.
Message frequency varies based on your appointment activity. Standard message and data rates may apply depending on your mobile carrier and plan.
We do not send promotional or marketing messages via SMS through our gateway. All messages sent by Avayble are transactional and directly related to your appointments or account. For complete details on our SMS program, see our SMS Communication Policy.
Avayble offers an optional Google Calendar integration available to providers (not clients). When a provider chooses to connect their Google account, Avayble requests access through Google’s OAuth consent flow using only the specific scopes listed below. No Google data is accessed for providers who have not connected their account.
Scopes requested and how each is used:
https://www.googleapis.com/auth/calendar.events — read and write access to events on the provider’s calendars. We use this scope to (a) read the provider’s existing calendar events so that times marked busy in Google Calendar are blocked off in Avayble’s availability picker, preventing clients from booking on top of pre-existing commitments; (b) write each confirmed Avayble booking onto the provider’s calendar as an event so it appears alongside their other commitments; (c) update or delete those Avayble-created events when the underlying booking is rescheduled or cancelled.https://www.googleapis.com/auth/calendar.calendarlist.readonly — read-only access to the list of calendars the provider is subscribed to. We use this scope to populate the calendar-selection picker so the provider can choose which of their calendars to sync into Avayble’s availability blocking.https://www.googleapis.com/auth/userinfo.email — read access to the email address associated with the connected Google account. We use this scope to display which Google account is connected in the provider’s settings page and to detect when the connected account changes.What we store from Google data: for each event we read from the provider’s synced calendars, we store the start time, end time, calendar identifier, event identifier, event title, and (when present) the event’s location, so that the event can be displayed as a blocked time slot in the provider’s schedule. We do not store event descriptions, attendee lists, attachments, or any other event metadata. Stored event data is automatically removed when the source event is cancelled in Google Calendar or when the provider disconnects the integration.
What we store for events we write: the event identifier and calendar identifier of each event Avayble creates on the provider’s calendar, recorded on the corresponding Avayble booking so the event can be updated when the booking is rescheduled and deleted when the booking is cancelled.
Limited Use disclosure. Avayble’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
Revoking access. Providers can disconnect Google Calendar at any time from their Avayble settings page. Disconnecting revokes Avayble’s stored tokens, stops all webhook subscriptions, and removes the synced calendar data from Avayble. Providers can also revoke Avayble’s access directly from their Google account permissions page; doing so will cause the integration to fail until the provider reconnects through Avayble.
Your data is stored in encrypted cloud databases hosted in the United States. We implement industry-standard security measures including:
While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or compliance purposes.
Appointment records may be retained in anonymized form for analytics and service improvement purposes.
Depending on your location, you may have the following rights regarding your personal information:
To exercise any of these rights, contact us using the information below. We will respond within 30 days.
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.
If the massage provider you book with through the Service is a California Certified Massage Therapist (CMT) — who, as of January 1, 2026 under Assembly Bill 1697, is classified as a "provider of health care" — or any other regulated health-care provider, certain health-related information you share with them through the Service (such as treatment notes, allergies, medical conditions, or treatment preferences) is also protected by the California Confidentiality of Medical Information Act (CMIA, Cal. Civ. Code § 56 et seq.). Under CMIA, your provider is the holder of your medical information, with duties to keep it confidential and to use and disclose it only as permitted by law. Avayble acts as a contractor handling that information on the provider's behalf and maintains reasonable physical, administrative, and technical safeguards consistent with CMIA, including encryption of sensitive fields at rest, encrypted transit, access controls, and breach-notification practices. Requests to access, correct, or delete medical information should be directed to your provider in the first instance; you may also contact us at the email below.
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.