Privacy policy

Controller

• Company name: Hostflow Software LLC, operating the Hostflow brand
• Legal form: Limited liability company (LLC) organized under the laws of New Mexico, USA
• Registered office: 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA
• Registration: New Mexico Secretary of State, file no. 3312621
• Contact: contact@wearehostflow.com

Data collected and purposes

• Contact and demo requests: name, email, property. To arrange the conversation (legal basis: pre-contractual steps).
• Subscription and payment: name, email, company, phone, billing address. To perform the contract and invoice (legal bases: contract, legal obligation). Card data is processed by Stripe only.
• Website creation: property information and photos, calendar access. To build and run your website (legal basis: contract).
• Messages with us: the content of your messages. To reply and follow up (legal basis: legitimate interest).
• Audience measurement: anonymous visit statistics. To improve the website (legal basis: legitimate interest).

Recipients

Your data is never sold. It is shared only with the providers the service requires:

• Stripe (payments and invoicing);
• Framer (website hosting);
• Google (email, calendar and video calls);
• Meta / WhatsApp (automated messages to guests and staff).

Transfers outside the European Union

Some of these providers may process data outside the European Union, in particular in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

Retention periods

• Customers: for the duration of the contract, then 3 years for customer relationship purposes;
• Invoices and accounting records: 10 years;
• Prospects and demo requests: 3 years after the last contact.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, write to contact@wearehostflow.com. We reply within one month.

You may also lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).

Cookies

Our website uses no advertising cookies. Audience measurement is done without tracking cookies. Embedded services (booking, payment) may set their own cookies, required for them to work, when you use them.

Security

We apply appropriate technical and organisational measures to protect your data: encrypted connections, restricted access, recognised providers.

Guest data

For bookings made on a host customer’s website, the host is the controller; Hostflow acts as a processor, under the conditions set out in our terms of service.

Changes

This policy may change. The date of the last update is shown at the top of this page.