1. Introduction
Welcome to GuavaTex ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, https://guavatex.com/, and our scheduling services (collectively, the "Services").
Please read this Privacy Policy carefully. By using our Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms, please do not access or use our Services.
2. Information We Collect
We may collect information about you in a variety of ways. The information we may collect via the Services includes:
- Personal Data You Provide to Us: Personally identifiable information, such as your name, email address, and telephone number, that you voluntarily give to us when you register for the Services or book an appointment.
- Appointment Information: Information related to the services you schedule, including dates, times, and notes associated with your appointments.
- Automatically Collected Information: When you access the Services, we may automatically collect certain information, such as your IP address, browser type, operating system, and access times.
3. How We Use Your Information
Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you to:
- Create and manage your account.
- Provide, operate, and maintain our Services.
- Process your transactions and send you related information, including appointment confirmations and reminders.
- Send you administrative or transactional communications.
- Respond to your comments, questions, and provide customer service.
- Monitor and analyze usage and trends to improve your experience.
4. Sharing and Disclosure of Information
We do not sell your personal information. We may share information with third-party service providers that perform services for us or on our behalf, including communication providers (like Twilio) to facilitate sending SMS (text message) reminders and notifications.
Meta (Facebook and Instagram)
- Facebook Login: if you choose to sign in with Facebook, we receive the basic profile information you authorize, such as your name and email address, and use it only to create or sign you into your GuavaTex account.
- Ad account reporting (business owners): a salon owner may connect their own Facebook ad account from the GuavaTex dashboard. With the owner's permission, GuavaTex reads that account's campaign names and daily totals of spend, impressions and clicks (the ads_read permission) and shows them next to the bookings those ads produced. This access is read-only: GuavaTex never creates, edits or pauses ads, and never posts to Facebook or Instagram.
- Ad measurement (business owners): when a salon owner turns on Meta ad tracking for their booking site, the site loads the Meta Pixel and GuavaTex reports completed bookings to Meta's Conversions API so the owner can measure their own ads. These reports contain the booking amount, time, the visitor's IP address and browser identifiers set by Meta. We do not send customer names, phone numbers or email addresses, and we do not use this data for our own advertising.
Retention and deletion of Meta data: the owner's ad account authorization token is stored encrypted and kept only while the ad account remains connected; imported ad statistics are kept for the same period. Disconnecting the ad account in GuavaTex immediately deletes the token and all imported statistics. Owners can also revoke GuavaTex's access from their Facebook settings, and anyone may request deletion of Meta-related data through our Data Deletion Instructions; we complete such requests within 30 days.
5. Google User Data
GuavaTex offers optional integrations with Google services. Nothing is accessed unless a business owner chooses to connect a Google account and authorizes GuavaTex through Google's OAuth consent flow. Depending on which features the owner turns on, GuavaTex accesses the following on their behalf:
- Google Business Profile — the business name, address and Google location identifier for profiles the owner manages; customer reviews (star rating, review text, reviewer display name and timestamps); replies posted by the business; and the profile's services, posts and photos, which GuavaTex updates only when the owner asks it to.
- Google Calendar — GuavaTex creates its own calendar in the connected Google account and creates, updates and removes events on it for the salon's appointments and staff shifts. GuavaTex cannot see or change the owner's or technician's other calendars or events.
- Google Ads — campaign names and daily totals of clicks, impressions and cost for the connected ad account, so the owner can see which ads lead to appointments. When the owner turns it on, GuavaTex also creates a conversion action in that account and reports each visit that began with an ad click, sending only the ad click identifier, the visit amount and the time. No customer name, phone number or email is sent.
We use this data only to provide these features to the business owner who connected the account: reading and replying to their own reviews, keeping their Google profile and calendar up to date, and showing their own advertising results inside the GuavaTex dashboard. We do not access any Google account without the owner's explicit authorization, and we do not create, solicit, or incentivize reviews.
Where a business owner uses our optional AI-assisted reply drafting, review text may be transmitted to a third-party language model provider solely to generate a suggested reply for that owner to review. Suggested replies are published only at the owner's direction.
Retention of Google user data
- Authorization tokens are stored encrypted and kept only while the Google account remains connected.
- Business Profile data (location details, reviews and replies) is kept while the account is connected, so it can be shown to the owner in the dashboard.
- Google Ads reporting data (daily campaign totals) is kept while the account is connected.
- Google Calendar: we store only the identifiers of the events GuavaTex created, so that it can update or remove them. We do not store the contents of the owner's other calendar events.
- We do not keep Google user data longer than needed to provide these features. When a GuavaTex account is closed, all Google user data held for that business is deleted within 30 days.
Deletion of Google user data
- Disconnect in GuavaTex: a business owner may disconnect a Google account at any time from the GuavaTex dashboard. On disconnection we delete the stored authorization tokens, and the Google data associated with that connection is deleted within 30 days.
- Revoke access at Google: access can be revoked directly at myaccount.google.com/permissions.
- Request deletion: a business owner may ask us to delete all Google user data held for their business through our Contact Us page or by following our Data Deletion Instructions. We complete these requests within 30 days and confirm when they are done.
Limited Use Disclosure: GuavaTex's use and transfer of information received from Google APIs to any other app will adhere to the
Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising or any purpose unrelated to the features described above, or transfer it except as necessary to provide those features. We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.
6. SMS/Text Messaging Terms and Conditions
By providing your mobile phone number on our platform, you consent to receive transactional text messages regarding your appointments, including confirmations, reminders, and cancellation notices.
- You can cancel the SMS service at any time by texting "STOP" to the number from which you received the message. After you send the "STOP" message, we will send you a final SMS message to confirm that you have been unsubscribed.
- If you need assistance, you can text "HELP" for more information or contact us through our Contact Us page.
- Carriers are not liable for delayed or undelivered messages.
- Message and data rates may apply for any messages sent to you from us and to us from you. Message frequency will vary based on your appointment activity.
Important: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be sold, rented, or shared with any third party for their own marketing purposes.
7. Data Security
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable.
8. Your Rights and Choices
You may at any time review or change the information in your account or terminate your account by logging into your account settings or by contacting us using the contact information provided below.
9. Children's Privacy
Our Services are not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.
11. Contact Us
If you have any questions about this Privacy Policy, you can reach us by visiting our
Contact Us page.