Privacy Policy

Welyno provides software that hospitality operators (‘hosts’) use to give their guests a personal link for a stay. When you create a workspace, Welyno processes your account data as a controller. When a host enters guest data into Welyno, the host is the controller of that data and Welyno processes it on the host’s behalf.

Account data: your name, email address and sign-in method, plus workspace details such as the organisation name and billing email.

Stay data entered by hosts: guest name, stay dates, unit, contact details used to send the link, and the language preference.

Guest activity within a stay link: check-in and checkout confirmations, requests, issue reports, replies, feedback and any photos or videos a guest chooses to attach.

Technical data: request logs, a daily-rotating hashed client identifier used for rate limiting (raw IP addresses are not stored), browser locale and device type.

To operate the service: resolve guest links, show the right stay to the right guest, deliver updates and notify the host team.

To keep the service secure: rate limiting, abuse prevention, audit logs of sensitive actions.

To bill subscriptions and provide support.

We do not use guest data for advertising, profiling or any purpose unrelated to the stay.

Photos and videos uploaded with issue reports or requests are stored privately, served through short-lived signed URLs and visible only to the host team of the relevant workspace. They are never public and never used to train models or for marketing.

Guests do not create accounts. Each stay link is time-limited and tied to a single stay. Sensitive access details — door codes, Wi-Fi passwords, access instructions — are encrypted at rest and released to the guest only according to the host’s rules.

Data is encrypted in transit. Access to production systems is restricted to authorised personnel.

We do not sell, rent or trade personal data. We share data only with the sub-processors needed to run the service (hosting, database, email delivery, file storage and payment processing), each bound by a data processing agreement.

Stay data is retained for as long as the host workspace needs it to operate and report on stays, and is deleted or anonymised according to the host’s retention settings or on request. Account data is deleted when a workspace is closed, subject to legal retention obligations for billing records.

Depending on your location you may have rights to access, correct, delete or export your personal data, and to object to or restrict certain processing. Guests should contact the property they stayed with, which controls their stay data; hosts can contact Welyno directly. We respond to verified requests within the legally required time.

Welyno uses only essential cookies: a session cookie for signed-in hosts and a cookie that remembers the chosen language. We do not use advertising or cross-site tracking cookies.

We will post any material change to this policy on this page and, where appropriate, notify workspace owners by email. Questions about privacy can be sent to the contact address published in your workspace settings.