Overview
Avero, Inc. (“Avero,” “we,” “us”) provides a customer-relationship-management platform built for hotels that sell direct. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to our website, applications, and related services (together, the “Services”).
When you use Avero on behalf of an organization, that organization is the “controller” of the customer data you enter, and we process it as their “processor” under our customer agreement. This policy describes our own practices as a business.
Information we collect
Information you provide
- Account details — your name, work email, company, role, and password when you create an account or request a demo.
- Customer data — the contacts, organizations, deals, activities, and messages you and your team add to your workspace.
- Communications — messages you send to our sales and support teams.
- Billing information — plan, billing contact, and payment details processed by our payment provider.
Information collected automatically
- Usage data — pages viewed, features used, and actions taken within the Services.
- Device & log data — IP address, browser type, device identifiers, and timestamps.
- Cookies — small files used to keep you signed in, remember preferences, and measure product usage. You can control cookies through your browser settings.
How we use information
We use the information we collect to:
- Provide, maintain, and improve the Services;
- Authenticate users and secure accounts;
- Respond to demo requests, questions, and support enquiries;
- Send service, security, and (where permitted) marketing communications;
- Understand how the Services are used so we can improve them;
- Detect, prevent, and address fraud, abuse, and security issues; and
- Comply with legal obligations.
We do not sell your personal information, and we do not use customer data you enter into your workspace to train third-party AI models.
Sharing & disclosure
We share information only in these limited circumstances:
- Service providers — vendors who process data on our behalf (for example, hosting, email delivery via Resend, and analytics) under contracts that require appropriate safeguards.
- Within your organization — with other authorized users of your Avero workspace.
- Legal & safety — when required by law or to protect the rights, property, or safety of Avero, our users, or the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.
Google user data
If you connect Google Calendar to Avero, we access your Google data through Google APIs only with your explicit consent, and only under these scopes:
- Calendar events (
calendar.events) — to create, update, and remove the Google Calendar events that mirror your Avero activities and scheduler bookings, and to import events from your chosen calendar into your Avero timeline (two-way sync). - Free/busy (
calendar.freebusy) — to hide times you are busy from your public booking page. - Calendar list (
calendar.calendarlist.readonly) — to let you choose which calendar to sync when you connect.
We store your OAuth tokens server-side only (they are never exposed to your browser) and, for synced events, the event identifier, times, title, and attendee email addresses — solely to keep your calendar and Avero in sync. We do not use Google user data for advertising, we do not sell it, and no human reads it except with your permission, for security purposes, or where required by law. It is shared only with the infrastructure providers that host the Services, never with other third parties.
You can disconnect Google Calendar at any time in Settings → Calendar sync, which deletes the stored tokens and stops all access immediately. You can also revoke Avero's access from your Google Account permissions.
Limited Use. Avero's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data retention
We retain personal information for as long as your account is active or as needed to provide the Services. When you close your account, we delete or de-identify your data within 90 days, except where we are required to retain it for legal, tax, or security reasons. Customer data is handled according to the instructions in your organization's agreement.
Your rights & choices
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@averocrm.com. If Avero processes data on behalf of your organization, we will direct your request to that organization.
You can opt out of marketing emails at any time using the unsubscribe link, and manage cookies through your browser.
Security
We protect information with encryption in transit and at rest, role-based access controls, network isolation, and regular security reviews. No system is perfectly secure, but we work continuously to safeguard your data and will notify you of a breach as required by law.
International data transfers
Avero is based in the United States and may process information in other countries. Where we transfer personal data across borders, we rely on appropriate safeguards such as Standard Contractual Clauses to protect it.
Children's privacy
The Services are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Services after an update means you accept the revised policy.
Contact us
Questions about this policy or your data? Reach our privacy team at privacy@averocrm.com, or write to us at:
Avero, Inc.
128 Harbour Street, Suite 400
Charleston, SC 29401, United States