Privacy policy
Updated 03.11.2026
DRAFT – under review by The Host and a lawyer. This text may change before the official launch. Questions: info@thehost.al
Who we are
The Host provides Dua The Host, an AI assistant that answers guests on behalf of the property they are staying at, for apartments on Airbnb and Booking.
What we collect
Data you give us in forms (name, email, phone, property name) and the messages guests share with Dua The Host while talking to the property.
How we use it
To provide the service, contact you and improve the product. We never sell data.
How long we keep it
Conversations and messages are kept for as long as the property account is active, so Dua remembers guest context. They are deleted when the owner closes the account or on request to info@thehost.al.
Property accounts
Property and owner account data are kept for as long as the account is active. When the owner closes the account from Settings, this data is deleted, together with the property's reservations and conversations.
Where it is stored
With the infrastructure providers listed below.
Subprocessors
To provide the service we rely on these providers: Google (Gemini) – AI processing of messages; Upstash – data storage and cache; Neon – database; Vercel – hosting of the website and service; Meta (WhatsApp) – message delivery.
Your rights
You may request access, correction or deletion of your data at any time by writing to us.
Our role
For owner account data, The Host is the controller. For guest data that the owner provides or that guests write to Dua, the owner is the controller and The Host is the processor, under the Data processing agreement (DPA).
Legal basis
We process data under Albanian Law no. 124/2024 on personal data protection and, for EU guests, the GDPR: to perform the contract with the owner, on consent (e.g. email news) and on legitimate interest (service security).
Artificial intelligence
Guests talk to an AI assistant, not a person. Messages are processed by the model provider only to generate the reply.
International transfers
Some subprocessors store or process data outside Albania (EU and USA), using the safeguards those providers offer (e.g. standard contractual clauses).
Complaints
If you believe your rights were infringed, you may contact the Albanian Commissioner for the Right to Information and Personal Data Protection (IDP).
Contact
For any data request: info@thehost.al.