Privacy Policy

Last updated July 2026. This policy explains how Autohost collects, uses, and protects your personal data.

01. Who we are

Autohost is operated by Blue Nest Shpk, a company registered in Albania at Rruga Mitat Hoxha, Sarande. This policy explains what personal data we collect, how we use it, and the rights you have over it.

02. Scope of this policy

This policy applies to our website, our contact and newsletter forms, and the Autohost platform once you become a customer. It covers both data you give us directly and data that flows through our platform when you connect third-party booking accounts.

03. Data we collect from you directly

When you contact us, sign up for updates, or create an account: your name, email address, phone number, business details (such as the number of properties you manage), billing and payment information, and anything you write to us directly.

04. Data we collect through the platform

Once you connect a third-party booking platform (such as Airbnb or Booking.com) to Autohost, we receive booking data necessary to unify your calendar and provide our features. This can include guest names, contact details, and stay dates. We process this data on your behalf, as your data processor, to provide the service - we don't use it for our own purposes.

05. How we use your data

To provide, maintain, and improve Autohost; to respond to your inquiries; to process payments and manage your subscription; to send you service-related communications and, with your consent, marketing updates; and to comply with our legal obligations.

06. Our legal basis for processing

We rely on: performance of a contract (to provide the service you've signed up for), your consent (for marketing communications and analytics cookies), our legitimate interests (to operate and improve our business, and to respond to inquiries), and legal obligations (such as tax and accounting requirements).

07. Our role as controller and processor

For your own account and business data, we act as the data controller. For guest data that flows through third-party bookings you connect to Autohost, we act as a data processor on your behalf - you remain the data controller for that data, and are responsible for having a lawful basis to share it with us.

08. Who we share data with

We share data with the service providers that help us operate Autohost: the OTA platforms you connect (to sync bookings), payment processors (to handle billing), Resend (to deliver our emails), and Cloudflare (for bot protection via Turnstile and, where you've consented, analytics). None of these providers use your data beyond the role they play for us.

09. Cookies

We set one essential cookie, NEXT_LOCALE, to remember your language preference. With your consent, given through the banner shown on your first visit, we also use analytics cookies to understand how visitors use our site - page views and general usage patterns, not anything that identifies you personally. Analytics cookies only run if you accept them, and you can withdraw that consent anytime via "Cookie Settings" in the footer. We don't use advertising cookies.

10. Data retention

We keep your account and business data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, or dispute-resolution needs. Contact form and newsletter data is kept only as long as it's useful for following up with you. You can ask us to delete your data sooner at any time, subject to any legal retention obligations.

11. Data security

We use industry-standard measures, including encryption in transit (HTTPS/TLS), to protect the data you share with us. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

12. Your rights

Under GDPR and applicable Albanian data protection law, you can ask us what data we hold about you, request correction or erasure, restrict or object to processing, or request a copy of your data in a portable format. To exercise any of these rights, email hello@autohost.al.

13. Children's privacy

Autohost isn't directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.

14. Changes to this policy

We may update this policy as Autohost evolves. We'll update the date at the top when we do, and notify you of material changes where required by law.

15. Contact

Autohost is operated by Blue Nest Shpk, Rruga Mitat Hoxha, Sarande, Albania. Questions about this policy or your data? Email hello@autohost.al.