Privacy Policy

1. Who we are

WelcomeFlo (“WelcomeFlo”, “we”, “us” and “our”) is an Australian software business providing digital guest-guide tools for short-stay hosts and property managers.

For privacy questions, requests or complaints, email privacy@welcomeflo.com, or use the contact form and choose “Privacy or security”.

2. Scope of this policy

This policy applies to personal information handled through:

• welcomeflo.com and its pages
• The WelcomeFlo dashboard and account area
• Published WelcomeFlo guest guides, including Ask Flo, Flo Translations and Guest Extras
• The guide-creation flow, including template, listing-import and document-import journeys
• WelcomeFlo emails, forms and support channels
• Other services that link to this policy

It does not apply to websites, booking platforms, property-management systems or other third-party services, which have their own privacy practices.

3. Our role when handling information

Information WelcomeFlo controls

We decide how and why information is handled for our accounts, subscription and billing administration, website and product operation, product analytics, security and fraud prevention, customer support, contact-form submissions, careers expressions of interest, and our own marketing and advertising measurement. Where privacy laws use the term, WelcomeFlo is generally the “controller” of this information.

Information hosts place in their guides

Hosts and property managers decide what content goes into their guides and who receives each guide. Where a host uses WelcomeFlo to handle personal information, the host is responsible for why it is collected and for having an appropriate legal basis. WelcomeFlo acts as a service provider or processor to the extent applicable law requires.

Questions about information in a particular property guide should go to the host or property manager responsible for that guide.

Guest Extras

Where a host offers Guest Extras, the host decides what is offered, its price and its availability, and is the party a guest transacts with — payments for a paid Extra are processed directly to the host’s own connected Stripe account, and WelcomeFlo does not receive or hold guest funds. WelcomeFlo separately processes the information needed to operate that payment and communicate the request, as described below.

4. Personal information we collect

Account and profile information

• Name and email address
• Telephone number
• Business or organisation name
• Country, region or time zone
• Account preferences and subscription plan
• Authentication and sign-in records
• Records of account activity

Authentication is handled by our authentication provider. Passwords are hashed by that provider — WelcomeFlo cannot read your password, and cannot retrieve it for you.

Property and guide information

• Property name, address and descriptions
• Arrival and departure instructions
• Host and property-manager contact details
• Images, logos and branding
• Wi-Fi information
• House rules, safety and emergency information
• Local recommendations, links and uploaded files
• Guide web addresses and QR codes
• Other content you choose to publish

Some of this may be personal information, particularly where it identifies a host, property manager, contractor, co-host or other individual.

Billing and transaction information

• Billing name and address
• Subscription type, amount and currency
• Payment status, invoices and receipts
• Tax-related information
• The card brand and last four digits supplied by our payment provider

Payments are processed by Stripe. Card numbers are entered directly with Stripe and never reach WelcomeFlo’s servers. We store only a customer reference, your subscription status, and the card brand and last four digits shown in your billing settings.

Communications and support information

• Your name and email address
• The reason you selected and the content of your message
• Attachments or links you provide
• Relevant account or technical information
• Records of our correspondence with you

Contact-form submissions are used to answer your enquiry. They are not added to any marketing list.

Free resource downloads

When you ask for a free resource, such as a checklist or template, we collect:

• Your email address and first name
• The resource you asked for, and the page you asked for it on
• Whether you chose to receive marketing emails, and a record of when and how you made or changed that choice
• A record of the email we sent you with the resource (the address, subject and whether it was delivered)
• Only while Analytics is on for you in Cookie Settings (accepted by you in the UK, EU and EEA; on by default elsewhere unless you turn it off): the campaign details of the link you followed (source, medium, campaign, content and term) and the website you came from, reduced to the site’s address without the page or any query

We send you the resource by email whether or not you choose marketing emails. If Analytics is not on for you, we do not store the campaign details or the website you came from. If you turn Analytics off later, we stop collecting them for new requests; details we have already stored stay until they are removed under “How long we keep information”.

If you later create a WelcomeFlo account with the same email address, we link the resource record to your account, so that your marketing choice and how you found us can be associated with it. If you chose marketing emails when downloading a resource, that choice becomes your account’s product-news email setting, which you can change in your account settings at any time.

Careers and talent-network information

• Your name and contact details
• Location and time zone
• Employment interests and professional experience
• LinkedIn, portfolio or website links, and any work samples you send
• Records of communications about potential opportunities

Registering interest is not an application for an existing vacancy and does not guarantee we will make contact. This information is used only for relevant employment, freelance or contract opportunities unless you separately agree otherwise.

Website and product usage information

When you use the website or dashboard, our hosting and security layer necessarily processes technical information including your IP address, in order to serve requests and protect the service. Separately, our product analytics record:

• Pages and features viewed, and actions taken
• Device category, browser and approximate country
• Referring source and campaign parameters, where present
• Date, time and duration of activity
• Error and diagnostic events, and performance information

Our product analytics do not store IP addresses. We use this information to operate WelcomeFlo, understand how it is used, improve it, diagnose problems and protect accounts.

Advertising measurement information (only while Advertising is on for you)

On our advertising landing pages, while Advertising is on for you — in the UK, EU and EEA only if you have allowed it, and elsewhere unless you have turned it off — we collect:

• The campaign details of the ad that brought you here (such as its source, medium, campaign, content and term), the landing page, and when you first arrived
• Meta’s click identifier, if you arrived from a Meta ad
• Meta’s browser identifier, where Meta’s tag has set one
• Whether you started a Pro trial or made your first payment, when, and for a first payment the amount and currency

As with any website that loads a third-party tag, Meta’s tag runs in your browser, so Meta also receives technical information such as your IP address, browser type and the address of the page you view. If you start a trial or subscribe, we keep Meta’s click and browser identifiers, and the landing page you arrived on, in our own records linked to your account. We also record, on your checkout and subscription records with our payment provider, Stripe, whether Advertising was on for you when you started checkout and, if you had made a choice, when. If Advertising was on for you when you started checkout, those Stripe records also include the campaign details and landing page described above; if it was not, we do not record them there. Whatever you chose, they note the plan you chose and the part of WelcomeFlo you started checkout from, such as our pricing page or an advertising landing page.

Guest-guide usage information

When someone opens a published guide, we record how the guide was used so the host can see which information is helping guests:

• Which guide was viewed, and when
• Categories, sections and places opened
• Actions taken, such as copying Wi-Fi details or opening directions
• Searches performed within the guide
• Device category, and country only
• How the guest arrived at the guide, such as a QR code or a link

Guest analytics are deliberately anonymous. They store no names, no email addresses and no IP addresses. Location is recorded at country level only, taken from a country code our hosting platform provides — we do not read or retain the IP address it was derived from. The visitor identifier is randomly generated by the browser and carries no personal meaning, so a host can see how a guide is used but cannot identify who used it.

Guests never need a WelcomeFlo account, app or password to view a published guide.

Information received from third parties

We may receive information from providers that operate parts of the service — authentication, payment, hosting, AI and email-delivery providers among them — and from a listing platform when you import a Guide from a listing URL. What we receive depends on the service.

5. Information you provide about other people

You may provide personal information about other people — a co-host’s contact details, a property manager’s information, a contractor’s instructions.

Only provide personal information you are authorised to use and publish. Where appropriate, tell the individual that their information will be handled through WelcomeFlo and point them to this policy. Do not upload unnecessary sensitive information about another person.

6. Published guides are link-accessible

Published guides are designed to be shared with guests by web link or QR code. There is no guest login.

A published guide can be opened by anyone who has or finds its link, including guests from past stays. Treat it as a public web page, not private storage.

Hosts should think carefully before publishing:

• Permanent door or alarm codes
• Private-network credentials
• Personal identification documents
• Financial or health information
• Information about children
• Staff schedules
• Anything revealing when a property is unoccupied
• Anything else that could create a safety or security risk

Where possible, share temporary or guest-specific access information through a booking, access-control or secure messaging system instead. If you need to cut off access to a guide, you can deactivate it or change its web address.

WelcomeFlo is not responsible for a host’s decision to publish information they did not have authority to use, or that was unsuitable for a link-accessible guide.

7. Tracked share links

When a host shares a guide from WelcomeFlo — by copying the link, printing a sign, exporting the offline PDF or emailing a guest — the link they hand out passes through a short WelcomeFlo address before redirecting to the guide. This lets a host see which of those methods guests actually use.

For each of these links we record when it was first opened, when it was last opened, and how many times. The link carries a one-time token that identifies the sharing method, not a cookie or a persistent identifier — we do not use tracking pixels to decide whether a guide was opened, and we do not fingerprint devices.

These links measure the way a guide was shared, not the person who opened it. A link can be forwarded, and a printed sign can be photographed, so a host is never shown these figures as evidence about an individual guest.

Where a host emails a guide to a named guest, the record also holds that guest’s email address and the first name the host typed, so the host can see whether the guide they sent was opened. That record is visible only inside the host’s own account, is never used for our own marketing, and is deleted after the retention period set out below. A host can revoke an individual sent link at any time, which stops it opening the guide without changing the guide’s own address.

Hosts are not shown IP addresses, precise locations or device identifiers for these opens.

8. Guest Extras

Where a host offers Guest Extras — optional services like early check-in, a late checkout or an airport transfer — a guest who requests or books one is asked to provide the information needed to complete that request:

• First and last name
• Email address
• Phone number, where the Extra needs one
• Stay dates, and guest and child counts where relevant
• Any note or special instruction the guest adds
• The Extra requested, and any date, time or quantity chosen

This information is collected once per order and shared with the host so they can fulfil the request. It is used for that purpose, is not added to WelcomeFlo marketing, and is different from the anonymous Guide-usage analytics described above.

Payment

Paid Extras are processed through Stripe, using the host’s own connected Stripe account. Card details are entered directly with Stripe. WelcomeFlo does not receive or hold a guest’s full card number, and does not receive or hold the funds — a payment for an Extra goes directly to the host, not through a WelcomeFlo account. Depending on how a host has set up an Extra, a payment may be authorised and held until the host approves the request, or only taken once a request is confirmed or a quote is accepted.

We store records of the request and its outcome — amount, currency, status, and identifiers Stripe uses to reference the payment — so the order can be tracked, refunded if applicable, and reconciled for accounting.

Cancelling and refunding

A guest cancelling within a host’s stated policy is refunded automatically. Outside that window, cancellation generally needs the host’s agreement. Refunds are issued by the host from their own connected Stripe account; WelcomeFlo does not separately hold or move that money.

9. AI-assisted features

Several WelcomeFlo features are powered by artificial intelligence, currently provided by Google Gemini: Ask Flo, which answers a guest’s question using the host’s own Guide content; Flo Assistant, which helps a host rewrite, shorten or expand Guide text; Flo Places, which suggests nearby places for a host to review; Flo Translations, described below; and parts of the listing and document import process.

What may be sent for processing

Using one of these features can send relevant content to Gemini to generate a response — for example, the Guide section a host asks Flo Assistant to improve, a question a guest asks Ask Flo together with the Guide content needed to answer it, or content extracted from an imported listing or document. Flo Places sends only a host’s optional free-text preference (such as “somewhere quiet”) and the categories being searched, never Guide content.

What we store

A guest’s question to Ask Flo and Flo’s answer are stored against the Guide, together with an anonymous session identifier and, where given, whether the guest marked the answer helpful — on the same anonymous basis as other Guide analytics, with no guest name, email address or IP address. Flo Assistant’s suggestions are not separately logged: if a host accepts one, it simply becomes ordinary Guide content. Flo Places does not store its suggestions at all unless a host adds one to their Guide, at which point it is handled the same as any other place a host adds.

We have not independently audited or obtained a specific contractual commitment from Google about how content sent to Gemini through WelcomeFlo is retained or whether it is used to improve Google’s own models, and we do not make a claim about that here. If this matters for how you use an AI feature, avoid putting information you would not want processed this way into a question, a note, or Guide content you ask Flo to rewrite.

AI features can misread, omit or summarise inaccurately. Guests should treat an Ask Flo answer as a starting point rather than the final word for anything important, and hosts remain responsible for the accuracy of their published Guide content, including anything an AI feature helped produce.

10. Automatic translations

Where Flo Translations is available, a guest can choose to view supported Guide content translated into another language. The translation is generated automatically and a copy is cached so the same content does not need to be translated again for the next guest, until the host changes it.

A guest’s chosen language is remembered only in their own browser, for that Guide — it is not stored against a WelcomeFlo account or shared with the host as personal information. Cached translations are Guide content, handled the same way as the rest of a Guide, and are not deleted on a fixed schedule; a translation is replaced automatically once the host edits the source content it came from.

11. Listing imports and document imports

A host can start a Guide from a supported Airbnb or Booking.com listing URL, or by uploading an existing PDF or DOCX guest guide. Both routes create a draft the host reviews and edits before anything is published.

For a listing import, we use extraction providers to retrieve the publicly available information from the listing URL a host supplies. We keep the structured details produced from that process, not the raw provider response. For a document import, the file is processed to extract its content and is not itself kept afterwards — any images inside it are kept as part of the resulting Guide.

An abandoned draft — one a host never finishes reviewing — is automatically marked inactive after a short idle period, and anything staged for it is queued for deletion shortly afterwards.

12. How we collect personal information

We may collect personal information:

• Directly from you, through the website, dashboard or a form
• When you create, edit or publish a guide
• When you contact us, subscribe, request a free resource or make a payment
• Automatically through your browser or device
• From a host or property manager using WelcomeFlo
• From service providers acting on our behalf
• Through integrations you choose to connect

You can browse the public website without identifying yourself. Certain information is needed to create an account, take a payment, answer a support request or provide particular features. If it is not provided, we may be unable to deliver the service you asked for.

13. How we use personal information

To provide and operate WelcomeFlo

• Creating and managing accounts, and authenticating users
• Providing the dashboard and guest-guide service
• Publishing guide content and generating links and QR codes
• Processing subscriptions and payments, including Guest Extras payments
• Powering AI-assisted features such as Ask Flo, Flo Assistant, Flo Places and Flo Translations
• Sending account and service messages, and providing support

To improve the product

• Understanding how WelcomeFlo is used
• Identifying popular or confusing features
• Improving usability and performance, and developing new features
• Measuring onboarding and conversion
• Understanding which free resources and campaigns lead to sign-ups, using the optional campaign details described above
• Producing aggregated business and product reports

Where possible we use aggregated or de-identified information for these purposes.

To measure our advertising (while Advertising is on for you)

While Advertising is on for you, we use the advertising measurement information described above to understand which of our ads lead to trials and subscriptions, and we share the relevant events with Meta so it can report on our ads and help us improve how they are delivered. We do not use this information for anything else.

To communicate with you

• Responding to enquiries and providing support
• Sending security, account and billing notifications
• Confirming form submissions, and sending you the free resource you asked for
• Telling you about material service changes
• Sending marketing communications where permitted, including to people who ticked the marketing box when requesting a free resource

To protect WelcomeFlo and its users

• Preventing spam, fraud and abuse, and investigating suspicious activity
• Enforcing our Terms of Service
• Protecting accounts and systems, and diagnosing technical problems
• Establishing, exercising or defending legal claims
• Complying with lawful requests and legal obligations

To manage future opportunities

We use careers information to review expressions of interest, assess suitability for potential work, contact people about relevant opportunities and manage employment, freelance or contractor discussions.

14. Legal grounds for processing

Where the law of your location requires a legal ground, we rely on one or more of the following.

Performance of a contract

Where processing is necessary to provide the service, manage an account, process a subscription, or take steps you asked for before entering a contract.

Legitimate interests

Where reasonably necessary to operate and improve WelcomeFlo, provide support, understand product use, secure our systems, prevent fraud and abuse, communicate with customers, run the business, and establish or defend legal claims. We consider the effect of this processing on the people involved.

Consent

Where required, including for certain marketing communications, optional analytics and advertising measurement. In the UK, EU and EEA we ask for your consent before optional analytics and advertising measurement start. Elsewhere they may run by default and you can opt out in Cookie Settings. You can withdraw consent or opt out at any time; this does not affect processing that was lawful beforehand.

Legal obligations, and protection of rights and safety

Where we must comply with laws, regulations, court orders, tax requirements or valid government requests; and, in limited circumstances, where necessary to protect someone’s vital interests or the rights, safety and security of WelcomeFlo, our users or others.

15. When we share personal information

We do not sell personal information.

Service providers

We rely on a small number of providers to run WelcomeFlo. Each processes information only for the services it provides to us, under its contractual obligations and applicable law:

• Vercel — application hosting, deployment and content delivery
• Supabase — database, authentication and file storage
• Stripe — payment processing, subscription billing, and Guest Extras payments through each host’s own connected account
• Resend — email delivery: transactional email such as contact-form messages, guides emailed to a guest and the free resources you request; and, if you ticked the marketing box, your marketing contact and the marketing emails we send you
• Google Gemini — the AI model behind Ask Flo, Flo Assistant, Flo Places and Flo Translations
• Google Maps Platform — maps and place information inside guest guides. Where a guide shows a map, the guest’s browser communicates with Google
• Apify and Bright Data — retrieve publicly available listing information when a host imports a Guide from a listing URL

Meta (advertising measurement)

While Advertising is on for you, we share information with Meta Platforms, Inc. and, where applicable, Meta Platforms Ireland Limited (together, “Meta”) to measure our advertising:

• From your browser, on our advertising landing pages: the pages you view there, together with Meta’s browser identifier and technical information such as your IP address and browser type
• From our servers, if you then start a Pro trial or make your first payment: the event (a trial start or a first payment), when it happened, for a first payment the amount and currency, the address of the landing page, a hashed version of your email address, a hashed version of your account identifier, and Meta’s click and browser identifiers where we have them

Hashing converts an email address or identifier into a code before it is sent. It does not make the information anonymous: Meta uses these codes to match events to Meta accounts. We do not send your name, phone number or postal address, and our servers do not send your IP address or browser details.

Meta processes this information under its Business Tools Terms and Privacy Policy. Depending on the applicable law and the processing involved, Meta may act as our processor, a joint controller with us, or an independent controller.

We send an event to Meta only if Advertising was on for you when you started your checkout (allowed by you in the UK, EU and EEA; on by default elsewhere unless you had turned it off), and we stop sending later events if you turn Advertising off (see “Cookies and similar technologies”).

Hosts and property managers

If you view a guest guide, we provide the host with anonymous, aggregated analytics about how that guide was used. If you use a host-controlled feature that sends them information, that information reaches the host as necessary to deliver the feature.

Professional advisers, legal and safety

We may share information with lawyers, accountants, insurers and auditors where reasonably necessary, and may disclose information where we reasonably believe it is needed to comply with a law or enforceable request, respond to a court order, protect rights, property or safety, investigate fraud, abuse or a security incident, or establish or defend legal claims.

Business transactions

If WelcomeFlo is involved in a merger, acquisition, financing, restructuring or sale of assets, personal information may be reviewed or transferred as part of that transaction. We will take reasonable steps to ensure it stays protected and is used consistently with this policy.

With your direction or consent

We share information when you ask us to, when you connect a third-party integration, or where you otherwise give valid consent.

16. International processing and transfers

WelcomeFlo is based in Australia, but our providers operate globally. Our primary database and file storage are hosted in the United States, and our AI provider, Google, may process content submitted to an AI feature in the United States or elsewhere it operates infrastructure. Information may also be processed in Australia, the European Economic Area and other countries where our providers or their infrastructure operate.

Privacy laws in those countries may differ from those in your location. Where required, we use reasonable contractual, technical or organisational safeguards for international transfers, which may include data-protection terms, standard contractual clauses or another legally recognised mechanism. Using a third-party integration may also direct information to the countries where that provider operates.

Meta may process the information we send it for advertising measurement in the United States and other countries where it operates. Where applicable, Meta’s terms include data-transfer provisions intended to support these transfers.

17. How long we keep information

We keep personal information only as long as reasonably necessary for the purposes in this policy, including providing the service, meeting legal obligations, resolving disputes and protecting our rights. Our usual approach:

Account and guide information

Kept while the account is active. After deletion, some information may be kept briefly to complete the deletion, guard against accidental loss, resolve disputes and clear backups, or longer where legally required or necessary for security and fraud prevention.

Billing and Guest Extras transaction records

Generally kept for at least five years, or longer where the law requires. Some transaction and order references may be kept for accounting and dispute purposes even after an account is deleted, with the connection to your account removed.

Support, contact and careers information

Contact-form and careers submissions reach us by email rather than as a separate record in our systems, so they are retained as part of our normal email records, generally for no longer than reasonably necessary to handle the enquiry and keep an adequate business record. You can ask us to delete a specific message or careers submission at any time.

Records of guides emailed to guests

Kept for up to 400 days from the date the guide was sent, then deleted along with the record of whether it was opened. The permanent links behind a copied link, a printed sign or an offline PDF hold no personal information and stay in place for as long as the guide does, so a sign on a wall keeps working.

Ask Flo questions and answers

A guest’s question and Flo’s answer are kept as part of the Guide’s usage information, on the same basis as other Guide analytics described above. We intend to bring this onto the same up-to-24-months cycle as our other analytics; as of the date of this policy that cleanup has not yet been automated, and we are treating that as an implementation gap to close rather than a change to the policy.

Cached translations

A cached translation of Guide content is kept as part of that Guide until the host edits the source content, at which point it is regenerated. It is not deleted on a separate schedule.

Import drafts

A listing or document import a host does not finish reviewing is automatically marked inactive after a short idle period, and anything staged for it is queued for deletion shortly afterwards.

Usage, analytics and security information

Generally kept for up to 24 months. Security logs may be kept for a different period where reasonably necessary to investigate incidents or protect the service.

Free resource downloads

What we keep depends on what you chose and whether you have a WelcomeFlo account. “Last request” means the last time you asked for a resource.

• If you did not choose marketing emails and the record is not linked to an account: deleted 90 days after your last request
• If you chose marketing emails and have not unsubscribed, and the record is not linked to an account: deleted 12 months after your last request. A new request starts the period again
• If you unsubscribed or withdrew your marketing choice, and the record is not linked to an account: deleted 12 months after the later of your unsubscribing or withdrawing and your last request. We keep that record for that time so that we respect your choice, and we do not use it for marketing
• If the resource record is linked to your account: kept while the account exists, and deleted with it
• Campaign details, the website you came from and the page you asked for the resource on are removed from the record 13 months after they were last stored, even if the rest of the record is kept
• The records of the emails we sent you with a resource are deleted 12 months after they were sent
• The record of when you made or changed your marketing choice is kept with your resource record and deleted when it is deleted
• A note that a marketing contact was removed from our email provider holds no email address or name and is deleted 30 days after the removal

Turning Analytics off later does not by itself delete campaign details we have already stored; they are removed on the schedule above, or sooner if you ask us to delete your information (see “Your choices and privacy rights”).

When your account deletion completes (after the 14-day period in which you can cancel it), the resource records linked to your account or to your email address are deleted, together with the choice and delivery records that belong to them, and the marketing contact we hold for you with our email provider is queued for removal. Billing, tax, fraud and security records, and anything we must keep for a legal reason or a legal hold, follow the separate periods described in this policy.

Advertising measurement information

• The cookie that remembers your Cookie Settings choices lasts up to 180 days
• The cookie that records which ad brought you to WelcomeFlo is set to last up to 90 days, although your browser may remove it sooner
• Meta’s own cookies are set and expire under Meta’s control, and information Meta has already received is kept under Meta’s own policies
• Meta’s click and browser identifiers, and the landing page, that we keep in our own records when you start a checkout are deleted 90 days after that checkout
• Our record of which events we have sent, or decided not to send, to Meta is kept for 13 months after the event reaches its final status
• Our record that you turned Advertising off is kept for as long as your account exists

Our records of events sent to Meta, and of Advertising being turned off, contain no email address, click identifier or browser identifier. Our advertising attribution record, Meta conversion record, and Advertising withdrawal record are deleted when you delete your account. Stripe keeps a note, with your checkout and subscription records, whether Advertising was on for you when you started checkout and, if you had made a choice, when, and, if it was on, the campaign details and landing page; turning Advertising off afterwards does not remove them.

Backups and legal holds

Information may remain in secure backups for a period after removal from active systems. We may keep information longer where required by law, subject to a legal hold, or reasonably necessary for an investigation or legal claim. When information is no longer needed, we take reasonable steps to delete it, de-identify it or make it inaccessible.

18. Security

We use reasonable technical and organisational safeguards designed to protect personal information against loss, misuse, interference, unauthorised access or disclosure, alteration and destruction. These include:

• HTTPS for all traffic, including every published guest guide
• Encryption at rest by our infrastructure providers
• Row-level security enforced in the database, so access rules apply even if the application layer is bypassed
• Authentication handled by a specialist provider, with hashed passwords
• Administrative access restricted to named accounts and enforced in the database
• Secrets held in server-side environment configuration, never exposed to the browser
• Monitoring, logging, backups and routine software updates

No internet transmission or storage system can be guaranteed completely secure. You are responsible for protecting your account credentials, using a strong and unique password, and keeping control of your email account and devices.

If you believe your account or information may have been compromised, contact privacy@welcomeflo.com promptly. If a data breach occurs we will investigate and act, and where the law requires we will notify affected individuals and the relevant regulators. Our Security page describes our current safeguards and limitations in more detail.

19. Cookies and similar technologies

Essential

Used to keep you signed in, maintain sessions, protect against fraud and abuse, remember essential preferences and operate features you ask for. This includes the cookie that remembers your Cookie Settings choices, which lasts up to 180 days. Disabling these may stop parts of WelcomeFlo working.

This includes browser storage set on a published Guide itself: a randomly generated visitor and session identifier used for the anonymous analytics described above, and — only on the device that opened the Guide — the guest’s chosen Guide language and any in-progress search or Ask Flo history, none of which is sent to WelcomeFlo’s servers as personal information.

Analytics

Used to understand which pages and features help hosts, and where errors or usability problems occur. On our marketing site, optional analytics depend on where you are. In the UK, EU and EEA, and if we cannot tell where you are, they only run after you accept them — nothing is stored and no analytics run beforehand. Elsewhere they may run by default until you turn them off in Cookie Settings. Either way, turning them off clears any identifier already stored.

Analytics within the signed-in dashboard cover an account holder’s own use of the product, are described in this policy, and are not separately gated.

The same choice governs the campaign details and the referring website we would otherwise store when you request a free resource: if Analytics is not on for you, we do not store them.

Advertising

Used to measure whether our ads on Meta (Facebook and Instagram) lead to trials and subscriptions. These run only on our advertising landing pages. In the UK, EU and EEA, and if we cannot tell where you are, they only run if you allow them: nothing from Meta loads, and none of these cookies are set, until you do. Elsewhere they may run by default until you turn Advertising off in Cookie Settings. While Advertising is on for you:

• Meta’s tag (the Meta Pixel) loads and may set or read Meta cookies in your browser, including “_fbp” and, where applicable, “_fbc”, which identify your browser to Meta
• We set our own cookie, “wf_attr”, recording the campaign details and Meta click identifier of the ad that brought you here. We ask your browser to keep it for up to 90 days; your browser may remove it sooner

Managing your choice

Use the Cookie Settings link in the website footer to change your choices at any time. Analytics and Advertising are separate: allowing one does not allow the other. Your choices are remembered for up to 180 days, after which you may be asked again (or, outside the UK, EU and EEA, the default described below applies again). You can also control cookies through your browser, though blocking them may affect how parts of the service work.

Which setting applies depends on where you are. In the United Kingdom, the European Union (all 27 member states) and the EEA (Iceland, Liechtenstein and Norway), Analytics and Advertising are off until you allow them, and we show a cookie banner on your first visit. Everywhere else they are on by default, no banner is shown, and you can turn either or both off in Cookie Settings. If we cannot tell where you are, we treat you as being in the UK, EU or EEA. We decide this from the country code our hosting platform provides with your request; we do not read or store your IP address for this, and we remember which of the two settings applies only in a cookie that ends with your browser session.

If you have already made a choice, we respect it wherever you are: we do not change it because your location changes, and the default for your region is never recorded as a choice you made. A default being on is not the same as you having accepted it, and turning it off in Cookie Settings is recorded as your choice from then on.

Turning Advertising off

Turning Advertising off stops future advertising measurement in your browser and removes the Advertising cookies from that browser. If you are signed in when you do, we also stop sending any trial or payment event for your account that has not yet been sent, including a first payment that follows a trial you started while Advertising was on. If you turn it off while signed out, we cannot connect that choice to your account, so it applies to that browser only.

Turning Advertising off does not delete information Meta has already received, and it does not change our billing or checkout records. If you allow Advertising again later, a trial or payment that began before you turned it off is still not sent; a new checkout you make after allowing it again may be. To exercise rights over information Meta holds, use the options in Meta’s Privacy Policy, or contact us at privacy@welcomeflo.com.

20. Marketing communications

We may send product news, educational content or offers where you have asked for them, consented, or where otherwise permitted by law. Marketing messages identify WelcomeFlo and include a way to opt out.

Opting out does not stop necessary service messages such as security alerts, password resets, billing notices, changes affecting your account or replies to your enquiries.

When you request a free resource, you can tick a box to receive more free tools, templates and tips. Only if you tick it do we create a marketing contact for you with our email provider. If you do not tick it, you still receive the resource you asked for, but no marketing contact is created and we do not email you marketing. You can unsubscribe at any time from the link in any marketing email. If you tick the box again later, we treat that as a fresh opt-in.

Submitting the contact form, requesting support or registering interest in careers does not subscribe you to marketing, and neither does requesting a free resource unless you tick the marketing box.

21. Your choices and privacy rights

Your rights depend on where you live. Subject to applicable law, you may be able to:

• Ask whether we hold personal information about you, and request access to it
• Request correction of inaccurate, incomplete or outdated information
• Request deletion, or restriction of certain processing
• Object to certain processing, including direct marketing
• Withdraw consent
• Request a portable copy of information you provided
• Complain to a privacy regulator

Some rights have exceptions — we may need to keep information to meet a legal obligation, complete a transaction, protect security, or establish or defend a legal claim.

Making a request

You can view and update much of your information directly in your account settings, including requesting account deletion. For anything else, email privacy@welcomeflo.com. We may ask for information reasonably necessary to confirm your identity, and for evidence of authority where an agent makes a request on your behalf.

We respond within the period applicable law requires. If we cannot fulfil a request we will explain why where required, and tell you what options you have. We do not ordinarily charge for privacy requests; a reasonable fee may apply where the law permits and a request is manifestly unfounded, excessive or requires an unusual form of access.

22. Additional rights in the EEA and United Kingdom

Where EU, EEA or UK data-protection law applies, you may have rights of access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, objection to direct marketing, withdrawal of consent, and the right to complain to your local supervisory authority.

Where we rely on legitimate interests, you can ask for more information about them. WelcomeFlo does not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

23. Information about children

WelcomeFlo accounts are intended for adults and people authorised to act for an accommodation business. Do not create an account if you are under 18 unless a parent, guardian or authorised organisation has approved and manages your use.

Published guides may be viewed by guests of any age, but WelcomeFlo does not require anyone to provide personal information in order to view a guide. Hosts must not add unnecessary personal information about children to a guide.

If you believe a child has provided personal information to WelcomeFlo without appropriate authorisation, contact privacy@welcomeflo.com so we can review it.

24. Sensitive information

WelcomeFlo is not designed to collect or store sensitive personal information — such as information about health, race or ethnicity, political opinions, religion, sexual orientation, biometric identifiers, criminal history or membership of certain organisations — unless genuinely necessary for a particular lawful purpose.

Do not place sensitive information in a published guide unless you have a clear legal basis, the information is necessary, and the person concerned has been properly informed. We may remove or restrict content that creates an unreasonable privacy, safety or legal risk.

25. De-identified and aggregated information

We may combine, aggregate or de-identify information so it no longer reasonably identifies anyone, and use it to understand product usage, measure performance, produce business insights, improve WelcomeFlo, develop features and describe general service trends.

We take reasonable steps not to re-identify information that has been properly de-identified, except where permitted or required by law.

26. Third-party links and services

Guides and website pages may link to third-party websites and services — restaurants and attractions, map and direction services, booking platforms, transport providers, social media and host-selected resources.

We do not control the privacy practices, security or content of those third parties. When you follow a link or use an integration, that provider’s terms and privacy policy apply.

27. Changes to this policy

We may update this policy as WelcomeFlo develops, our practices change or legal requirements evolve. When we do, we update the “Last updated” date above.

If a change materially affects how we use personal information, we will take reasonable steps to give additional notice through the website, the dashboard or email.

28. Privacy questions and complaints

Send privacy questions, requests and complaints to privacy@welcomeflo.com, or use the contact form and choose “Privacy or security”. Please include enough detail for us to understand and investigate.

Do not send passwords, complete payment-card details or unnecessary identity documents by email.

We will acknowledge and investigate privacy complaints and aim to respond meaningfully within a reasonable period. If you are not satisfied with our response, you may be entitled to complain to the privacy or data-protection authority where you live. In Australia, that is the Office of the Australian Information Commissioner. In the EEA or United Kingdom, it is your local supervisory authority.

For general questions that are not privacy-related, please use our contact page.