This Privacy Policy describes how Welon ("we", "us", "our") collects, uses, stores, and shares personal data when you use our platform and services. We are committed to handling your data responsibly and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Contents
In short
- We keep only what is needed to run your account and the service.
- We never sell your data.
- When you delete your account, its data is erased within 90 days. Billing records are kept for 7 years, as the law requires.
- You can ask for a copy, a correction or deletion of your data at any time at info@welon.app. We reply within 30 days.
The summary helps you find the essentials quickly. It does not replace the full text.
1. Who we are
Welon is a platform that helps short-term rental owners, managers and their teams organise cleaning, supplies and maintenance. For the purposes of data protection law, the data controller for information you provide directly to us is:
- Data controller
- ΧΡΙΣΤΟΥΛΑΚΗΣ ΓΕΩΡΓΙΟΣ ΙΑΣΩΝ (Christoulakis Georgios Iason)
- Registered address
- Nikomachou 54, 116 31 Athens, Attica, Greece
- VAT number
- EL146433190
- GEMI number
- 171774241000
- info@welon.app
2. Information we collect
We collect the following categories of personal data:
Account information
Name, email address, and password hash when you create an account. Optionally, business name, phone number, and billing address.
Usage data
Actions taken within the platform such as task creation, property configuration, staff assignments, and feature interactions. Used to improve product quality and detect issues.
Technical data
IP address, browser type, device type, operating system, and session identifiers. Collected automatically for security and performance monitoring.
Communication data
Content of messages sent through our contact form or support channels. Messages from the contact form are delivered to info@welon.app and handled directly by the data controller. Retained to respond to your enquiry and improve support quality.
Your team's data
When you add team members to Welon, such as cleaners, technicians or suppliers, you enter their name and email address. We use them only to send them the tasks and reminders you set.
Photos and property information
Your property details, booking dates from the calendars you connect (Airbnb, Booking.com, Vrbo), task notes, and the photos you or your team upload before and after each task.
For your team's data and the photos, we act on your behalf and according to your instructions. You are responsible for letting your team members know that their details are entered in Welon.
Payment information
Subscription payments are processed by Stripe. We do not store your full card details; Stripe processes them directly. We only receive what is needed for billing and invoicing, such as your plan, payment dates and billing details.
3. Legal basis for processing
We process your personal data under the following legal bases:
- Contract performance: processing necessary to deliver the services you have subscribed to
- Legitimate interests: security monitoring, fraud prevention, and product improvement, where these interests do not override your rights
- Legal obligation: compliance with applicable laws, including tax and financial reporting requirements
- Consent: for optional analytics and marketing cookies and for marketing communications, where you have opted in
4. How we use your data
We use your personal data to:
- Create and manage your account and authenticate access
- Deliver the features and functionality of the Welon platform
- Process subscription billing and send payment receipts
- Send transactional emails such as password resets and account notifications
- Respond to support requests and enquiries
- Monitor for security threats, errors, and performance issues
- Improve the product based on aggregated usage patterns
- Meet legal and regulatory obligations
5. Data sharing and transfers
We do not sell personal data. We share data only in the following circumstances:
- Service providers: trusted third parties who assist us in operating the platform (e.g. cloud hosting, payment processing, error monitoring), bound by contractual data processing agreements
- Legal requirements: when required by law, court order, or government authority
- Business transfer: in connection with a merger, acquisition, or sale of assets, with notice provided to affected users
The providers we currently work with are:
- Supabase: database, authentication and file storage
- Sentry: error monitoring and, with your consent, session replays
- Stripe: payment processing and invoicing
- Google: Google Analytics and Google Ads, only with your consent
- Meta: Meta Pixel, only with your consent
- LinkedIn: LinkedIn Insight Tag, only with your consent
Supabase, Sentry and Stripe are bound by GDPR compliant data processing agreements. Google, Meta and LinkedIn also process data under their own privacy policies.
Some of these providers, such as Google, Meta, LinkedIn and Stripe, may process data outside the European Economic Area, mainly in the United States. In those cases the transfer relies on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.
6. Data retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy:
- Account data is retained for the duration of your subscription and up to 90 days following account deletion, to allow recovery if the deletion was unintended
- Billing records are retained for 7 years to meet financial and tax reporting obligations
- Task photos are retained according to your plan: up to 1 month on Basic, up to 3 months on Pro and up to 12 months on Ultra
- Technical and error logs are retained for up to 90 days
- Support communications are retained for up to 2 years
7. Your rights
Under the GDPR and applicable data protection law, you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: request correction of inaccurate or incomplete data
- Erasure: request deletion of your personal data, subject to legal retention obligations
- Restriction: request that we limit processing in certain circumstances
- Portability: request your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests or for direct marketing
- Withdrawal of consent: withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal. For cookies, use Cookie settings
To exercise any of these rights, contact us at info@welon.app. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
8. Security
We implement technical and organisational measures to protect your personal data against unauthorised access, loss, and misuse. These include encryption in transit (TLS), encrypted storage, access controls, and regular security reviews.
No transmission over the internet is completely secure. While we take every reasonable precaution, we cannot guarantee absolute security.
9. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
10. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated via email or a notice within the platform before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
11. Contact
For any questions, requests, or concerns about this Privacy Policy or how we handle your data, contact us at info@welon.app.