Privacy Policy

1. Information We Collect

2. How We Use Information

• Provide, operate, and maintain the Sable platform
• Process bookings, payments, and refunds
• Send transactional messages such as booking confirmations and appointment reminders
• Send SMS and email marketing with your prior consent
• Authenticate your identity and maintain account security
• Respond to support requests and improve customer service
• Analyze usage patterns to improve features and performance
• Comply with legal obligations and enforce our Terms of Service

3. SMS / Text Messages

Sable uses SMS messaging for the following purposes:

• Authentication: We send one-time passcodes (OTPs) on demand through Twilio Verify when a Sable account user submits a phone number. These messages are separate from the A2P campaign described below.
• Appointment and Customer Care: With your consent, we send appointment confirmations, reminders, booking updates, payment links, and direct replies from businesses using Sable.
• Marketing: With your separate, explicit opt-in consent, the business you are booking with may send promotions and special offers through Sable.

4. Google Calendar Integration

Sable offers an optional integration that puts your Sable appointments and time blocks on your Google Calendar. If you choose to connect your Google account, here is exactly what happens with your Google user data:

• What we access:With your permission, granted through Google’s consent screen, Sable receives access limited to creating a dedicated calendar in your Google account and managing events on that calendar only (the calendar.app.created scope). Sable cannot see, change, or delete your other calendars or their events.
• How we use it: Solely to keep the Sable calendar in your Google account up to date with your Sable schedule. We do not use Google user data for advertising, and we do not make decisions about you based on it.
• What we store: We store the connection credentials Google issues to Sable, encrypted at rest, along with the identifiers of the events we created so we can keep them current. We do not read or store the contents of your personal Google calendars.
• Sharing: Google user data is never sold, never shared with third parties, and never used for marketing. No human at Sable reads it except with your explicit permission for support, for security purposes, or where required by law.
• Disconnecting:You can disconnect at any time from Settings → Integrations in Sable (choosing whether to keep or remove the Sable calendar), or by revoking Sable’s access at myaccount.google.com/permissions. Disconnecting deletes the stored credentials.

Sable’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

• Service Providers: We share information with trusted third-party vendors who help us operate Sable, including Stripe (payment processing), Twilio (SMS and voice), and cloud infrastructure providers. These vendors are contractually obligated to protect your data.
• Stylists and Salons:If you book an appointment through a salon’s Sable booking page, your booking information is shared with that stylist or salon.
• Connected apps you authorize: When you connect an external service such as Muse, we share the workspace information covered by your selected permissions and current Sable role. This may include client and stylist names, appointment and service details, availability, prices, or revenue totals. The connector does not share client contact details, private notes, form responses, formulas, photos, messages, or card details. Booking and rescheduling proposals require separate approval in Sable. Disconnecting blocks future access and invalidates pending proposals, but does not erase data already received by the connected service. That service handles its copies under its own privacy policy. Sable keeps connection and approval records for security and booking history under the retention practices below; proposal records are removed when the workspace is deleted.
• Legal Requirements: We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights or the safety of others.
• Business Transfers: If Valar Development Group is acquired or merges with another entity, your information may be transferred as part of that transaction, subject to the same privacy protections.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS), encrypted storage for sensitive fields, hashed passwords, and row-level access controls in our database. Access to production systems is restricted to authorized personnel.

No system is completely secure. While we take reasonable precautions, we cannot guarantee the absolute security of your data. If you believe your account has been compromised, contact us immediately at support@sable.salon.

7. Data Retention

We retain your account information and associated data for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal or financial compliance purposes (such as tax records, which may be retained for up to 7 years).

Client records stored by stylists on the platform are subject to the stylist or salon’s own retention decisions. Upon account closure, stylists may export their client data before deletion.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request an export of your data in a machine-readable format.
• Opt-Out of Marketing: Unsubscribe from marketing emails or SMS at any time via the unsubscribe link or by replying STOP.

To exercise any of these rights, email us at support@sable.salon. We will respond within 30 days.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us: