Your data, kept safe.
ResoFlow holds your guests' details and your bookings, so we take looking after them seriously. Here's plainly how — where your data lives, who processes payments, and the controls you get.
Your data stays in the EU
Every part of ResoFlow runs on Google Cloud's EU region in Belgium (europe-west1). Your guests' details and bookings are hosted and processed there, in line with UK and EU GDPR. A small number of specialist providers (like payments and email delivery) process some data outside the UK/EU under recognised legal safeguards — every one is listed on our Sub-processors page.
Registered and accountable
ResoFlow is operated by Caleonix LTD (Company No. 17162652), trading as ResoFlow, and is registered with the UK Information Commissioner's Office (ICO) for data protection under registration ZC127147.
Payments handled by Stripe
Card payments — subscriptions, deposits and event tickets — are processed by Stripe, a global payments provider. Card numbers go straight to Stripe; ResoFlow never stores your card details or your guests'.
You stay in control of your data
Request a full copy of everything you hold in ResoFlow whenever you like — we prepare it and email you a secure download link — or request deletion whenever you want to leave. On plans with the customer portal, your guests get GDPR self-service too — they can access and manage the details you hold about them.
Backed up and monitored
Your database is backed up every day, so your bookings and guest history are never a single mishap away from being lost. Live uptime is published on our public status page — no sign-in needed.
Controls built in
Turn on two-factor authentication for your account, and — on paid plans — give staff their own PIN with only the permissions they need and review a full activity log of who did what. Public pages carry bot protection to keep automated abuse out.
Built so one bad moment never becomes a bad night.
Backed up every day
Your database is backed up daily — and a monitoring job checks every day that the backup actually completed, so a silent failure can't go unnoticed.
Seven days of point-in-time recovery
Beyond the daily backups, the database can be restored to any moment in the last seven days — so even a same-day mistake is recoverable.
The paper fallback
Print a day sheet — the full day's bookings on paper — at the start of service, so if your venue's internet drops mid-shift you simply carry on from paper.
A public status page
How the platform is running is published openly at status.resoflow.co.uk — no sign-in, nothing hidden.
Have a security question we haven't covered? Email [email protected] — we're happy to help.