Wayfarlo Explore

Clear information. Confident choices.

Privacy notice

How Wayfarlo uses account, listing and request information—and how to ask for access, correction or deletion.Updated October 11, 2026 · Operated by Syndicate Hub LLC

Information we use

Wayfarlo is operated by Syndicate Hub LLC. This notice covers Wayfarlo, not the independent websites linked from listings.

  • Accounts: email address, display name, a password hash, session records, and profile details you choose to provide.
  • Listings: property descriptions, location, price, photos, source details, availability information and review records. Public listings and public lister profiles are visible to other visitors.
  • Requests and communication: the contact details, dates, guest counts and messages you submit for an inquiry, booking request, destination request, report or support request.
  • Preferences: account-saved listings and browser-stored planning preferences. Some browser-only notes, drafts and saved searches are specific to that browser.
  • Billing and security: subscription identifiers and status, authentication attempts, upload-validation records and technical logs used to operate and protect the service.

We use this information to provide account access, display listings, route requests, manage membership, review accuracy and rights concerns, and address misuse. Do not submit passwords, full payment details, government identification or sensitive personal information in messages or photos.

Sharing and service providers

Inquiry and booking-request details are shared with the relevant lister so they can respond. They are not public listing content. Treat a complete booking-status link as private: anyone holding that link may be able to view the request details.

Floot provides the app hosting, database and storage infrastructure. Stripe processes lister payments and manages payment information under its own privacy notice. Independent listers, external listing sources, map services, image hosts and other linked services have their own practices. Loading their content or following a link can disclose technical information such as your IP address to that provider.

Service providers may process information outside your country. Public profiles and listings can be accessed worldwide. We may disclose relevant records when necessary to respond to lawful requests, investigate abuse or protect rights.

Your privacy choices

The default hosting analytics tracker is disabled. The home page offers controls for optional growth measurement. That measurement records events such as visits and join/list clicks; it does not need your inquiry text or email address. Browser storage is also used for planning preferences and drafts. Clearing browser data removes browser-only content, but does not delete server-side account records.

Review what you make public in your lister profile, especially social links and contact details. Only upload photos you are authorized to use, and remove visible personal details before uploading. New user uploads are re-encoded to remove embedded metadata; older imported images are not covered by that guarantee.

Request access, correction, deletion or another privacy choice by email. Include your account email and the request type, not your password or identity documents. We may need a proportionate identity check before changing or disclosing account data. Depending on the law that applies, you may have additional rights to restrict processing, object, receive a portable copy, appeal a decision or complain to a regulator.

Email opens your mail app; the request is not sent until you send it. Requests are reviewed manually, not automatically completed by clicking a link.

Retention and deletion requests

Account and listing records are currently stored while they support the service. A deletion request triggers review of the relevant records and any legal or operational need to retain them. We do not promise instant deletion, a universal fixed retention period, or deletion from an independent lister's systems.

Payment records, unresolved disputes, fraud evidence and records subject to legal obligations may need to be retained after account closure. Retention exceptions should be limited to the information needed for that purpose; access should remain restricted. Provider backups may persist until their normal expiry. Category-specific retention periods and provider deletion procedures are still under review.

Privacy requests must be handled within the deadlines of the law that applies. For example, applicable GDPR requests generally require a response within one month; covered Colorado Privacy Act requests generally require a response within 45 days. Extensions and exceptions depend on that law. These are not claims that every law applies to every Wayfarlo user.

Security, audience and updates

Wayfarlo uses access controls and server-side validation, but no service can guarantee absolute security. Keep your password and private request links secure. Report suspected exposure through our security contact; do not probe other users' data.

Wayfarlo is intended for adults planning travel, housing or property listings, not children. If you believe a child's personal information was submitted, contact us so it can be reviewed.

This notice will be updated as the service or its data practices change. See the date above and contact Syndicate Hub LLC with questions.