Security and trust
Your data and your guests’ data,kept in the EU.
BnBFlow keeps data in the European Union, uses encrypted connections and role-based access, and complies with the GDPR. Card payments go through Stripe, and card details never reach us. BnBFlow is a product of DTZ LABS S.R.L.
Message us on WhatsApp01How we protect data
Concrete measures, not promises.
The same measures for every account, from a single property to a whole portfolio.
- Data hosted in the EUOur servers and primary infrastructure are in data centres in the European Union.
- Encrypted connectionsAll traffic between browsers, apps and servers is encrypted (TLS 1.2 or higher). Sensitive data is also encrypted at rest.
- Role-based accessEach team member sees only what their role allows (admin, manager, member, view-only) and the modules they have rights to. Owners have separate access, to their own properties only.
- BackupsThe database has automated backups, taken regularly.
- Guest IDsID details are requested only for the guest registration form required by law. Guests can fill them in and sign on their own phone.
- Payments through StripeCard details are entered at Stripe, which is PCI DSS certified. BnBFlow never receives or stores the card number.
02Guest data
Only what the law requires, only for as long as it requires.
The registration form is filled in through a unique link for the stay, with no account and no app to install. The data goes only to the host’s account, and only team members with that right can see it.
Guest data is kept for as long as the law of the country where the property is located requires; invoices for as long as tax law requires. After that, the data is deleted or anonymised.
03GDPR
Your rights, in plain words.
DTZ LABS S.R.L. processes data in line with the GDPR. The providers who help us (for example, payments or WhatsApp messages) work under data processing agreements.
You can ask at any time to access, correct, export or delete your data, within legal retention obligations. All the details are in the privacy policy and the cookie policy.
04FAQ
Security and data.
Have a security question? Write to hello@bnbflow.io — we reply the same business day, the next one at the latest.
Message us on WhatsAppWhere is data stored in BnBFlow?
In the European Union: our servers and primary infrastructure are in EU data centres. Some providers (for example, Stripe for payments) may also process data outside the EU, with the safeguards the GDPR requires.
Who can see my guests’ data?
Only the users in your account who have that right, according to their role. Owners see only their own properties, in the owner portal.
Does BnBFlow store card details?
No. Card payments go through Stripe, which is PCI DSS certified; card details are entered at Stripe and never reach BnBFlow.
Can I ask for my data to be exported or deleted?
Yes, under the GDPR: access, correction, export and deletion, within legal retention obligations (for example, invoices). The details are in the privacy policy.
How do I report a security issue?
Write to hello@bnbflow.io with the subject “Security”. We confirm receipt and come back with the next steps.
Want the details?
We’ll show you how BnBFlow handles your data.
An online or phone walkthrough, with answers to your team’s questions.