Privacy Policy
Effective Date: April 2, 2025
This Privacy Policy explains how Hostflow (“we”, “us”, or “our”) collects, uses, and protects your personal data when you use our services at hostflow.co. By accessing or using our platform, you agree to the practices described in this policy.
We are currently an early-stage project without a formal legal entity, but we take your privacy seriously and are committed to handling your data responsibly and transparently.
1. Information We Collect
We collect the following types of personal data:
- Account Information: When you sign up, we collect your name, email address, and the city where your property is located.
- Usage Data: We collect behavioral data such as clicks and session activity to help us improve the platform.
- Technical Data: We may automatically collect information such as your IP address, browser type, device information, and referring URLs.
2. How We Use Your Information
We use your data to:
- Provide and maintain our services
- Communicate with you about your account or updates
- Analyze user behavior to improve our service
- Generate dynamic landing pages with offers for your guests (if you’re a host)
We do not sell or share your personal data with third parties for marketing purposes.
3. Cookies and Analytics
We use Google Analytics to understand how users interact with our platform. Google Analytics sets cookies on your device to collect usage information. You can opt out by adjusting your browser settings or using Google’s opt-out tool.
4. Email Communication
We may use Mailgun to send transactional or system-related emails. These messages are essential to operating the Hostflow platform and cannot be opted out of unless you delete your account.
5. Authentication
You may choose to sign in via Google OAuth. In doing so, we collect only the necessary profile data to create and authenticate your account securely.
6. Data Storage and Security
All data is hosted via Hetzner servers and transmitted over secure HTTPS connections. While we strive to protect your data, no method of storage or transmission is 100% secure. We encourage users to take precautions, such as using strong passwords.
7. Data Retention
We retain personal data for as long as necessary to provide services or until you request deletion. At any time, you can ask us to delete your data by emailing privacy@hostflow.co.
8. Data Transfers
As we operate globally and use third-party services (e.g., Google, Mailgun), your data may be transferred and stored outside your country, including the United States. We ensure that such transfers comply with applicable data protection laws such as the GDPR.
9. Age Restrictions
Our platform is intended for users 18 years and older only. We do not knowingly collect personal information from minors.
10. Your Rights
Depending on your location, you may have rights under privacy laws like the GDPR or CPRA, including:
- The right to access your data
- The right to correct or delete your data
- The right to restrict or object to processing
- The right to data portability
To exercise any of these rights, email us at privacy@hostflow.co.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice on our website. The updated policy will be effective as of the date it is posted.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, you can reach us at: