Privacy policy

Avana is provided by Sweeber Technologies, a business registered in the Netherlands (Netherlands Chamber of Commerce number 91489377), Torenlaan 5B, 1402 AT Bussum, the Netherlands ("Avana," "we," "us"). For privacy questions or requests, email support-nl@getavana.com.

• Salon and studio owners and their team with an Avana account: we decide how your account information is used.
• Clients and members who book with a salon or studio through Avana: the salon or studio decides how your booking information is used, and we process it for them as their service provider. For your own Avana login and for keeping the platform secure, we act for ourselves.
• Visitors to our website: we decide how your information is used.

In the past 12 months we have collected these categories of personal information, from you directly, from your device, from the salon or studio you book with, and from our service providers:

• Identifiers: name, email address, phone number, account ID, IP address, and for Instagram users who message a salon, an Instagram-scoped ID. Used to provide accounts and bookings, send messages, secure the platform and support you.
• Customer records and commercial information: business name and address, tax ID, subscription and billing history; for clients and members, what they booked or bought, when, the price and payment status. Card details are held by our payment provider, not by us. Used to provide the service, process payments and keep records the law requires.
• Internet and device activity: pages visited, how you use Avana, error logs, and how you arrived at our site (campaign tags, referring page and ad click IDs). Used to run, secure and improve Avana and to measure our ads.
• Audio, electronic and visual information: profile photos, photos and videos a business uploads, and messages exchanged with a business through Avana Connect.
• Sensitive personal information: account login credentials, and health information that a salon or studio may ask clients or members for in intake or health questions. We only use sensitive information to provide the service, and we do not use it to infer characteristics about anyone.

Retention periods are under How long we keep information.

We do not sell personal information for money, and we never sell or share the personal information of a salon's or studio's clients or members. We do not knowingly sell or share the personal information of anyone under 16.

On our own marketing website, we use advertising cookies from Meta and Google to measure which of our ads lead to sign-ups. These only load if you accept advertising cookies. When a business owner creates an account, we may also send a hashed (scrambled) version of their email address to Meta and Google for the same purpose. Under California law, these may count as "sharing" personal information for cross-context behavioral advertising.

Your choice: you can opt out of this at any time. Decline advertising cookies with Cookie settings at the bottom of any page, and email support-nl@getavana.com with the subject "Do not share my personal information" to stop the hashed email being sent for your account.

We disclose personal information for business purposes to service providers that help us run Avana, under contracts that limit their use of it:

• Google Cloud and Firebase (Google Ireland Ltd / Google LLC): database, file storage and sign-in. Location: EEA (main database); United States possible for support.
• Vercel (Vercel Inc.): hosting of the website and app. Location: United States and EEA.
• Stripe (Stripe Payments Europe Ltd / Stripe Payments UK Ltd / Stripe, Inc.): online payments and payouts. Location: EEA, UK and United States.
• Resend (Plus Five Five, Inc.): sending booking and account emails. Location: United States.
• Loops (Loops.so): sending account and product emails to businesses. Location: United States.
• Spryng (Spryng B.V.): sending text messages. Location: EEA (Netherlands).
• Bunny.net (BunnyWay d.o.o.): storing and streaming video (courses and classes). Location: EEA.
• Anthropic (Anthropic, PBC): AI-assisted replies (Avana Connect, help assistant). Location: United States.
• Sentry (Functional Software, Inc.): error monitoring. Location: United States.
• PostHog (PostHog Inc.): product analytics. Location: EEA.

We also disclose information to the salon or studio you book with, to Meta or Google when a business connects Instagram or Google Calendar (see below), to analytics and advertising providers as described in our cookie notice, and to authorities when the law requires it, for example under a subpoena or court order. If we are involved in a merger or sale of our business, information may transfer to the new owner under this policy.

We are based in the Netherlands, and your information may be processed in the European Economic Area and the United States.

A salon can connect its Instagram professional account to Avana. Avana Connect then answers messages clients send to that account and helps them book. The connection only exists if the salon grants it in Instagram, and only for the account it connects.

What we store. For the connected account: the Instagram user ID, username, name, profile picture and an access token from Meta, which we store encrypted. For conversations: the messages a client sends and the replies Avana sends, the client's Instagram-scoped ID, the time, and whether someone tapped the booking button. We do not receive followers, photos or advertising data, and never see Instagram passwords.

Why. To answer the client, avoid duplicate replies, show the salon what is being asked and how many appointments Instagram brings in, and prevent misuse. We use AI to draft replies. We do not use these messages for our own marketing, do not sell them and do not share them with other salons or advertisers.

How long. The access token is removed when the salon disconnects or withdraws access. Conversations are kept while the salon uses Avana Connect. Recognized questions in our lookup cache expire after 30 days. Monthly totals are counts without names.

How to have it deleted. A salon can email support-nl@getavana.com. If you messaged a salon, you can also remove Avana in your Instagram settings and request deletion there; Meta passes the request to us, we delete the conversations, messages and links for your Instagram ID, and you see a confirmation code. This happens right away, and in any case within 30 days.

A salon can connect its Google account to see its appointments in Google Calendar. The connection only exists if the salon grants it at Google.

What Avana can access. Calendars Avana creates itself (the "Avana" calendar), free/busy information from the salon's own calendar, and the email address of the connected account. Avana cannot read the titles, names, places or contents of the salon's own events, and cannot change its own calendars.

What we store and send to Google. The connected account's email address, the ID of the Avana calendar and an encrypted access token. For each appointment, Avana adds the client's name, the service, the team member, the client's phone number, the salon's address and a link to the appointment to the Avana calendar. Client email addresses and notes are not sent. Free/busy times are not stored; they stay in our server's memory for a few minutes at most.

Why. Only to keep the salon's appointments in its own Google Calendar and block times when it is privately busy. We do not use this information for advertising or to train models, and we do not sell or share it. Avana's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Stopping it. If the salon disconnects Google Calendar or deletes its account, we remove the Avana calendar, revoke the permission at Google and delete the token. Access can also be removed in the Google account settings.

A salon can create a private calendar link to see its appointments in another calendar app. Each appointment shows the client's name, the service, the team member, the salon's address and a link back to Avana; no phone numbers, email addresses or notes. The link contains a long random key, a new link stops the old one working, and switching it off or deleting the account stops it immediately.

• Account and business information: while the account is active, plus 90 days after it ends.
• Client and member booking information: as long as the salon or studio keeps its account, or shorter if it deletes the client. When a salon deletes a client, the client card, notes, photos, documents and marketing consent are deleted; appointments stay without name or contact details so the salon's records add up; invoices are kept as the law requires, and an opt-out from offers is kept so it is respected.
• Invoices and accounting records: 7 years.
• Security and error logs: up to 12 months.
• Contact and callback requests: up to 24 months.

Depending on the state you live in, including California, Colorado, Connecticut, Virginia, Texas, Oregon and others, you have the right to:

• know what personal information we collect, use and disclose, and access a copy of it;
• correct inaccurate personal information;
• delete personal information, subject to exceptions the law allows;
• opt out of the sale or sharing of personal information and of targeted advertising (see We do not sell personal information);
• limit the use of sensitive personal information (we already only use it to provide the service);
• not be discriminated against for using these rights.

We extend these rights to everyone in the US, whether or not a state law requires it.

How to make a request. Email support-nl@getavana.com. We confirm receipt within 10 business days and respond within 45 days, which we may extend once by 45 days if needed, with notice. We verify your identity by matching information we already hold, such as your account email address. You may use an authorized agent; we will ask for proof of their authority and may ask you to confirm your identity with us directly.

Booked with a salon or studio? They decide how your booking information is used, so please send your request to them first; we will help them respond. If you write to us, we pass it on.

Appeals. If we decline your request, you can appeal by replying to our decision with the subject "Appeal". We respond within the time your state's law requires. If you are not satisfied, you can contact your state attorney general.

Salons and studios use Avana to send appointment texts and emails, such as confirmations and reminders. Message frequency varies with your bookings, and message and data rates may apply. Reply STOP to a text to opt out, or HELP for help. We do not sell or share phone numbers or text messaging consent with third parties for their marketing.

Marketing emails from us to business owners include an unsubscribe link, which takes effect right away.

We use reasonable security measures, including encryption in transit, encrypted storage of passwords and access tokens, role-based access, logging of admin actions and backups. No system is completely secure. If a breach affects your information, we notify you and the authorities as the law requires.

Avana is a business tool for adults and is not directed at children under 13. We do not knowingly collect personal information from children under 13 for our own purposes. Salons and studios that serve minors are responsible for getting a parent's or guardian's consent where needed.

We review this policy at least once a year and may update it. For material changes we email account holders in advance. The latest version is always on this page. Questions? Email support-nl@getavana.com.