Information we use
Wayfarlo is operated by Syndicate Hub LLC. This notice covers Wayfarlo, not the independent websites linked from listings.
- Accounts: email address, display name, a password hash, session records, and profile details you choose to provide.
- Listings: property descriptions, location, price, photos, source details, availability information and review records. Public listings and public lister profiles are visible to other visitors.
- Requests and communication: the contact details, dates, guest counts and messages you submit for an inquiry, booking request, destination request, report or support request.
- Preferences: account-saved listings and browser-stored planning preferences. Some browser-only notes, drafts and saved searches are specific to that browser.
- Billing and security: subscription identifiers and status, authentication attempts, upload-validation records and technical logs used to operate and protect the service.
We use this information to provide account access, display listings, route requests, manage membership, review accuracy and rights concerns, and address misuse. Do not submit passwords, full payment details, government identification or sensitive personal information in messages or photos.
Your privacy choices
The default hosting analytics tracker is disabled. The home page offers controls for optional growth measurement. That measurement records events such as visits and join/list clicks; it does not need your inquiry text or email address. Browser storage is also used for planning preferences and drafts, plus an opaque change marker to prompt sign-in checks in other open Wayfarlo tabs. That marker does not contain account identifiers or access credentials. Clearing browser data removes browser-only content, but does not delete server-side account records.
Review what you make public in your lister profile, especially social links and contact details. Only upload photos you are authorized to use, and remove visible personal details before uploading. New user uploads are re-encoded to remove embedded metadata; older imported images are not covered by that guarantee.
Use the privacy request center to submit and track an account request when signed in. Administrators can register requests received by email and record identity checks, response targets, decisions and action evidence. Status changes are review records—not automatic deletion, disclosure, cancellation or proof that a provider has deleted its copies. You can download a minimal request-status receipt containing reference and status metadata; descriptions, contact details and administrative evidence are excluded. That receipt is not an account-data export or proof that a request has been fulfilled. Keep downloaded receipts private.
Request access, correction, deletion or another privacy choice by email. Include your account email and the request type, not your password or identity documents. We may need a proportionate identity check before changing or disclosing account data. Depending on the law that applies, you may have additional rights to restrict processing, object, receive a portable copy, appeal a decision or complain to a regulator.
Email opens your mail app; the request is not sent until you send it. Requests are reviewed manually, not automatically completed by clicking a link. For eligible, reviewed accounts, the account-deletion page offers a short-lived approval requiring the owner’s current password and explicit confirmation. It removes the live account and basic access/preferences, not provider backups/logs, external copies, short-lived pseudonymous mail-abuse counters or the narrowly retained privacy-case contact and audit evidence. Accounts with billing history, listings, uploads, communications or other unresolved dependencies need individual handling; this path does not cancel membership. The privacy case remains open for provider follow-up and the final response.
Retention and deletion requests
Account-email links expire after 30 minutes for password recovery or 24 hours for email verification and can be used once. The app stores token hashes, not the raw links. A bounded hourly cleanup removes expired token records after a further 24 hours and email-request abuse counters older than 24 hours; expiry is enforced even when cleanup is delayed. Minimal app delivery metadata is retained for up to 30 days before bounded cleanup. Permanent delivery failures and spam complaints can pause account emails; minimal suppression records remain with the account while needed to prevent repeat failures and are reviewed for continued necessity. Provider delivery records, logs and backups have separate retention practices. Reviewed account-deletion approvals expire after 15 minutes. Bounded hourly maintenance removes deletion-attempt metadata older than 24 hours and unused approval metadata after expiry plus 24 hours; delays do not extend approval validity. Consumed receipt metadata is reviewed with the limited privacy-case audit evidence, rather than being automatically erased.
Account and listing records are currently stored while they support the service. A deletion request triggers review of the relevant records and any legal or operational need to retain them. We do not promise instant deletion, a universal fixed retention period, or deletion from an independent lister's systems.
Payment records, unresolved disputes, fraud evidence and records subject to legal obligations may need to be retained after account closure. Retention exceptions should be limited to the information needed for that purpose; access should remain restricted. Floot support described a seven-day rolling recovery history for paid databases, with no selective early removal of individual records. A database restore can reintroduce previously deleted records; reconciliation and reapplication of deletion remain operator-controlled procedures, not an automatic provider guarantee. Separate platform logs and email-send records expire under the provider’s own retention practices. These descriptions are not a contractual deletion SLA. Our private disposal register tracks relevant data categories, provider follow-ups, action evidence and limited-retention reasons. Retained-data and provider-waiting decisions require a next internal review within 90 days; that review interval is not a universal retention period or a promise of deletion within 90 days. A recorded completion may include specifically explained, limited lawful retention—not a claim that every copy was erased. Minimal original account identifiers may be retained in the restricted deletion ledger to reconcile a possible database restore. Category-specific maximum retention periods, transfer/processor terms and case-specific disposal decisions still require review.
Privacy requests must be handled within the deadlines of the law that applies. For example, applicable GDPR requests generally require a response within one month; covered Colorado Privacy Act requests generally require a response within 45 days. Extensions and exceptions depend on that law. These are not claims that every law applies to every Wayfarlo user.
Security, audience and updates
Wayfarlo uses access controls and server-side validation, but no service can guarantee absolute security. Keep your password and private request links secure. Report suspected exposure through our security contact; do not probe other users' data.
Wayfarlo is intended for adults planning travel, housing or property listings, not children. If you believe a child's personal information was submitted, contact us so it can be reviewed.
This notice will be updated as the service or its data practices change. See the date above and contact Syndicate Hub LLC with questions.