Privacy · Updated 9 September 2026
Your plans are personal.
This policy explains how Flindev Pty Ltd (ABN 31 656 277 397), the operator of Hey Loz, collects and handles information when you use the service.
Information we collect
We receive the account information you provide when signing in, such as your name and email address. We store the events, guest details, budgets, notes, messages, photos and files you choose to add. Voice features may process recordings and their transcripts. When you contact us, we receive your message and contact details.
Our service providers process technical information needed to deliver and protect the service, such as IP addresses, requests, device/browser information and error logs. Billing services process payment information; Hey Loz receives subscription, order and payment-status information.
How we use information
We use information to operate your account and workspace, provide the AI help you request, enable sharing and connected assistants, manage billing, respond to support requests, prevent abuse and understand how the product is working. You can use the planning dashboard without asking Loz for AI help.
AI and service providers
When you ask Loz for help, relevant messages, planning context and attachments may be sent to AI providers through OpenRouter. Research requests may be sent to search providers. The information needed depends on the task. Avoid including sensitive information that is unnecessary for the request.
We use Cloudflare for hosting and storage, PlanetScale for the application database, Clerk for accounts, and payment providers including Stripe for billing. Messaging features also involve the messaging networks and delivery providers for the channel you use. Providers handle information under their applicable service terms and privacy policies.
See the privacy information from Cloudflare, PlanetScale, Clerk, OpenRouter and Stripe. AI-provider retention and training rules can vary by provider, model and account settings; this policy does not promise that every provider applies the same rules.
Where information is processed
Our primary application database is configured in Sydney, Australia. This does not mean every part of the service processes information only in Australia. Hosting, authentication, payments, AI and messaging providers may process information overseas, including in the United States and other countries where they operate. Contact us if you need details about the providers used for a particular feature before using it.
Sharing and your own assistant
Only share information you are entitled to share. A person with an enabled shared link or granted access can see the content permitted by that share. If you connect your own AI assistant, it can receive the information allowed by the permissions you approve. Revoking access prevents future access through that connection; it cannot erase copies already received by someone else or their provider.
Cookies, preferences and measurement
Sign-in uses cookies and similar technologies to keep your session working. We also store interface preferences on your device. Our product measurement records a limited set of actions, such as a pricing-page visit or a plan being created, using fixed page categories. It does not include your event titles, guest details, messages, attachments, account identifiers or full page URLs. A local date marker helps count workspace visits on later days, and a session flag avoids repeated account-ready counts; neither identifies you or is sent to analytics. This aggregate measurement does not set an analytics identifier or use session replay. We respect supported browser Do Not Track and Global Privacy Control signals for this measurement.
Keeping and deleting information
We retain information to provide your account and plans and for necessary billing, security, operational and legal purposes. You can remove supported items in the workspace and request account or personal-information deletion by contacting us. Deletion from the active service may not immediately remove backups, security records, legally required records or copies held by recipients and third-party services. We will explain applicable limits when handling your request; we do not promise a fixed deletion period for every system.
Your choices and concerns
Email support@flindev.com to request access, correction or deletion, ask how information is used, or make a privacy complaint. We may ask for enough information to verify your identity. We will review and respond to your request. You may also contact the Office of the Australian Information Commissioner about privacy concerns.
We may update this policy as the service changes. The date above identifies this version. You can find our company details and support contact on the contact page.