Privacy Policy

Restaurant accounts: name, email, and a hashed password; your restaurant's name, address, hours, floor plan, and settings.

Bookings: when a diner books a table (through the dashboard, a restaurant's website widget, or the AI assistant), we collect the name, email, phone number, party size, date/time, and any notes (allergies, occasion, seating preference) submitted with that booking.

Billing: subscription status and plan details. Card numbers are never sent to or stored by Host Flow — they go directly to Stripe.

To operate the Service: running your floor plan and reservations, sending booking confirmation emails, powering the AI host assistant and photo-based floor plan import, processing your subscription, and providing support.

We don't sell personal data. We share it only with the service providers that make Host Flow work:

• Stripe — payment processing and billing.
• Resend — sending booking confirmation and account emails.
• Anthropic — powers the AI host assistant and floor-plan photo import; relevant floor/booking data or an uploaded photo is sent to Anthropic to generate a response.

We may also disclose data if required by law, or to protect the rights, safety, or property of Host Flow, our users, or others.

Host Flow uses a single session cookie to keep you signed in. We don't use advertising or cross-site tracking cookies.

Account and reservation data is kept for as long as your account is active, so your history stays intact if you cancel and come back. You can request deletion of your restaurant's account and associated data at any time by contacting us below.

If you booked a table through a Host Flow-powered site, the restaurant you booked with controls that data. Every confirmation email includes a link to view or cancel your own booking. For anything else — correcting details or requesting deletion — contact the restaurant directly, or reach us at the email below and we'll help route it.

We use reasonable technical measures (like password hashing and encrypted connections) to protect data, but no system is perfectly secure, and we can't guarantee absolute security.

Host Flow isn't directed at children, and we don't knowingly collect data from children under 13.

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

Questions about this policy, or a data request? Reach us at support@hostflow.app.