Privacy Policy

1. Introduction

Availy ("Availy", "we", "us", or "our") is a scheduling and business-management platform for independent instructors, educators, and tutoring studios. Availy is operated as a sole proprietorship based in the Province of Ontario, Canada. We are committed to protecting your privacy and handling personal information responsibly and in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws.

This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies to our website and the Availy service (the "Service"). By using the Service, you agree to this Policy.

2. Our Role

Availy plays two different roles depending on the information involved:

• As an organization that determines how information is handled, we are responsible for the personal information of our account owners (the instructors and studios who subscribe to Availy) and visitors to our website.
• As a service provider, when an instructor or studio uses Availy to manage information about their own students and parents, we process that information on their behalf and under their instructions. The instructor or studio is responsible for that information, including for obtaining any required consents. If you are a student or parent and have questions about how your information is used, please contact the instructor or studio you work with; you may also contact us and we will help direct your request.

3. Information We Collect

We collect the following categories of personal information:

• Account information. Your name, email address, phone number, password (stored in hashed form), business or studio name, plan, and locale and time zone.
• Student and parent information. Information that instructors and studios enter about their students and parents or guardians, such as names, contact details, relationships, courses, and notes. We process this on the instructor's behalf as described in Section 2.
• Scheduling and bookings. Availability, lessons, bookings, and related calendar information.
• Messages and attachments. Messages and files exchanged through the Service's messaging features.
• Payment information. Subscription and billing details. Payments are processed by Stripe; we do not collect or store full payment card numbers.
• Sign-in information. If you sign in with Google, we receive basic profile information (such as your name and email) from Google to create or access your account.
• Technical and usage data. Log data, device and browser information, IP address, sign-in history, and how you interact with the Service, collected automatically.

4. How We Use Your Information

We use personal information to:

• provide, operate, maintain, and improve the Service;
• create and secure accounts and authenticate users;
• process subscriptions, payments, and billing;
• send service-related communications by email and SMS, such as account, security, transaction, booking, and support messages;
• provide customer support and respond to your requests;
• monitor, prevent, and address security incidents, fraud, and abuse; and
• comply with legal obligations and enforce our agreements.

We rely on your consent and, where applicable, on the need to provide the Service you have requested and our legitimate business interests, consistent with PIPEDA. We do not use the Service to send you marketing messages without a basis to do so under Canada's Anti-Spam Legislation (CASL), and you can opt out of such messages at any time.

5. How We Share Information and Service Providers

We do not sell your personal information. We share information only as needed to operate the Service, including with the following categories of service providers (sub-processors), who are bound to protect it and use it only to provide services to us:

• Amazon Web Services (AWS) — cloud hosting, storage, and database (United States).
• Stripe — payment processing.
• Google — sign-in authentication, if you choose to use it.
• Amazon Simple Email Service and Amazon Simple Notification Service — sending email and SMS notifications.

We may also disclose information if required to do so by law or valid legal process, to protect the rights, safety, or property of Availy, our users, or others, or in connection with a merger, acquisition, or sale of assets (in which case we will require the recipient to honour this Policy).

6. Communications and Your Choices

We send communications by email and, where you have provided a mobile number, by SMS. You can opt out of non-essential messages at any time by replying STOP to an SMS or using the unsubscribe link in an email. We may still send essential service messages (such as security alerts, billing notices, and important account updates) that you cannot opt out of while you have an account. Standard message and data rates may apply to SMS.

7. Children's Privacy

The Service is intended for use by instructors, studios, and the families they serve. Account owners must be adults (18 or older). The Service is not directed to children under 13, and we do not knowingly allow children to create their own accounts.

Instructors and studios may add information about students who are minors. When they do, they are responsible for obtaining any consent required from a parent or guardian, and we process that information on their behalf. If you are a parent or guardian and wish to review, correct, or delete information about your child, please contact the instructor or studio that works with your child, or contact us at support@availy.app and we will assist. If we learn that we have collected personal information from a child without appropriate consent, we will take reasonable steps to delete it.

8. Where Your Information Is Stored

Availy is based in Canada, but our hosting and certain service providers are located in the United States. This means your personal information may be stored and processed in the United States and may be subject to the laws of that country, including lawful access by courts, law-enforcement, and government authorities. By using the Service, you acknowledge this transfer and processing. We take steps to ensure your information receives a comparable level of protection wherever it is processed.

9. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, and afterward as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we will delete or anonymize it. Following account termination, you may request a copy of your Customer Data for a reasonable period before it is deleted.

10. Security

We use appropriate technical and organizational safeguards to protect personal information against unauthorized access, use, disclosure, alteration, or loss, including encryption in transit and at rest, access controls, and hashed password storage. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Subject to applicable law, you have the right to access and correct the personal information we hold about you, to withdraw consent to certain processing, and to request deletion. To exercise these rights, contact us at support@availy.app. We may need to verify your identity before responding. If you are a student or parent, requests about information an instructor entered should generally be directed to that instructor or studio, and we will support them in responding.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. Depending on where you live, you may have additional rights under your local privacy laws, and we will honour those rights where they apply.

12. Cookies and Local Storage

We use cookies and similar technologies, including browser local storage, to keep you signed in, remember your preferences, secure the Service, and understand how it is used. Some features, such as Google sign-in, may set their own cookies. You can control cookies through your browser settings, but disabling them may affect how the Service works.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated Policy on this page and updating the "Last updated" date, and, where appropriate, by other means such as email. We encourage you to review this Policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or how we handle personal information, or if you wish to exercise your privacy rights, please contact us at:

Availy
Email: support@availy.app