Privacy Policy — Rebook
Ava Research LLC · Last updated: October 14, 2026
This policy covers Rebook (the "Service"), a connector that helps a small business fill a cancellation or opening by matching it against the owner's own waitlist through Muse. The defining rule of the Service: Rebook drafts; the owner rebooks. Rebook prepares outreach for the owner to send — it never contacts anyone itself.
What we store, and why
-
Account ID: an internal ID from your sign-in, used to keep your data separate from everyone else's. Sign-in is handled by Microsoft Entra External ID with a one-time code sent to your email — there is no password, and it asks for nothing but your email address. The Service itself never stores your email address.
-
Logged openings: the service, date/time, and optionally why it opened up, and its fill status.
-
Waitlist contacts: each contact's name, their own stated interest note (what they're waiting for, in their own words), and contact info you choose to give — real information about a real person, since that's the point of a waitlist.
-
Technical logs: request type, outcome, and timing. Logs never contain waitlist contact details, opening details, or sign-in tokens.
What we don't collect
The Service only accepts the fields above. We don't ask for or store payment card or bank account numbers, government ID numbers, precise location, photos, or health information. Rebook doesn't process payments at all, and it doesn't connect to any CRM or booking system.
No third-party services
Rebook runs entirely on Ava Research's own infrastructure. There are no external data providers, no third-party AI/model API calls, no API keys, and no secrets.
Permissions Muse asks for
One permission, Rebook.ReadWrite: it lets Muse read and update your logged openings and waitlist contacts on your behalf. That's all it can touch.
Who can see it
-
You, through your own account.
-
Meta's Muse, if you connect it, acting on your behalf with the permission above.
-
Service providers that host and run the Service (Microsoft Azure, East US 2 region) and handle sign-in (Microsoft Entra External ID), bound by their own security and confidentiality commitments.
-
No one else. We don't sell, rent, or share your data with advertisers or data brokers. Rebook itself never contacts a waitlist member — it only drafts outreach for you to send through your own channel.
How we protect it
Your data is isolated by account — no owner can read another owner's openings or waitlist. Access to the underlying systems is limited to what each part of the Service needs to do its job, and administrative access is limited to Ava Research LLC personnel who need it to operate the Service.
Data retention
-
Openings and waitlist contacts: kept until you delete them or your account.
-
Technical logs: 30 days.
Delete your data
Deletion is self-service — ask Muse directly, no email required. Ask Muse to delete your data, for example "Delete all my Rebook data." This permanently removes every logged opening and every waitlist contact for your account. This can't be undone.
Disconnect: remove Rebook from your connectors in Muse. Disconnecting stops Muse's access but doesn't delete your data — use the self-service deletion above first if you want it gone.
Children's privacy
The Service is not directed at children, and we don't knowingly collect information from anyone under 13.
Changes to this policy
If we make a material change, we'll update the date at the top of this page and, for significant changes, make a reasonable effort to notify active users.
Contact us
Ava Research LLC
privacy@avaresearchllc.com