Privacy Policy

Tourflow collects the information needed to run your account, including your name, email address, authentication records, and invitation history. We obviously also store the content you choose to create or import in Tourflow. This will include tour data, guest-list data, contacts, attachments, etc.

To keep the service working, we also process operational information such as session data, service logs, request metadata, error logs, and timestamps. If you email us for support, we keep those emails.

We use this information to make Tourflow work, including to secure accounts, sync data across devices, send invitations, respond to support requests, and keep the service reliable. For example, if you use "auto" mode when adding new items to a tour, we send the content you submit to external LLM providers to structure the tour data. When you use our address autocomplete features, or "auto" mode when adding new items to a tour, we send the place search query to a 3rd party mapping service to enrich vague place descriptions to real addresses. All of our operational data is handled and stored by a 3rd party infrastructure provider.

Generally, we share data only when needed to operate the service, in the ways described above - which is fairly standard on the web today. We could also find ourselves sharing data with authorities to comply with the law, or protect users and the service - although we don't really anticipate a situation where that would happen.

We don't sell personal data.

We use HTTPS and other reasonable technical and organisational safeguards to protect data in transit and at rest. We also limit access to authorised people and service providers who need it to operate the service.

We keep personal data for as long as it is needed to operate the service, maintain workspace integrity, meet legal, accounting, or security obligations, resolve disputes, and prevent abuse.

If you request account deletion, we aim to delete or anonymise the personal data associated with your account unless we need to retain limited information for legitimate reasons such as security, fraud prevention, legal compliance, or preserving records needed for shared workspace integrity. Residual copies may remain in secure backups for a limited period before they are overwritten.

You can request access to, correction of, or deletion of your account data by contacting us. You can also use the account deletion process described on our delete-account page.

You may choose not to provide certain information, but some parts of the service will not work without the account and workspace data needed to run them.

If you have questions about this policy or our privacy practices, contact us at hello@tourflowapp.com. We may update this page from time to time, and if we do, we will update the date shown above.