Your data, kept safe.
ResoFlow holds your guests' details and your bookings, so we take looking after them seriously. Here's plainly how — where your data lives, who processes payments, and the controls you get.
Your data stays in the EU
Every part of ResoFlow runs on Google Cloud in the europe-west1 region (a London-adjacent EU data centre). Your guests' details and bookings are processed and stored in the EU, in line with UK and EU GDPR — never moved out of the region.
Registered and accountable
ResoFlow is operated by Caleonix LTD (Company No. 17162652), trading as ResoFlow, and is registered with the UK Information Commissioner's Office (ICO) for data protection under registration ZC127147.
Payments handled by Stripe
Card payments — subscriptions, deposits and event tickets — are processed by Stripe, a global payments provider. Card numbers go straight to Stripe; ResoFlow never stores your card details or your guests'.
You stay in control of your data
Export everything you hold in ResoFlow in one click, or request deletion whenever you want to leave. Your own guests get GDPR self-service too — they can access and manage the details you hold about them from their customer portal.
Backed up and monitored
Your database is backed up every day, so your bookings and guest history are never a single mishap away from being lost. Live uptime is published on our public status page — no sign-in needed.
Controls built in
Turn on two-factor authentication for your account, give staff their own PIN with only the permissions they need, and review a full activity log of who did what. Public pages carry bot protection to keep automated abuse out.
Have a security question we haven't covered? Email [email protected] — we're happy to help.