This Privacy Policy describes how FoyerHost LLC (hereinafter "Company", "We", "Us") collects, uses, stores, and protects the personal data of its users (Property Owners/Managers) and their end customers (Guests). FoyerHost LLC is committed to fully complying with the European Union's General Data Protection Regulation (GDPR) (Regulation 2016/679) and applicable US privacy laws.
1. Our Role under the GDPR
For the proper implementation of the legislation, we distinguish two separate roles:
As a Data Controller
We are responsible for the personal data we collect directly from Owners / Managers (name, contact details, billing details) for account creation, subscription billing, and the provision of our SaaS platform.
As a Data Processor
We process Guests' personal data strictly and solely on behalf of and under the instructions of the Owners / Managers. The Owner acts as the absolute Data Controller for their Guests' data and bears sole responsibility for obtaining the necessary consent for processing, handling communication, and fulfilling their respective legal/tax obligations.
2. What Data We Collect
A. Owners / Managers' Data
- Full name, email address, and phone number.
- Billing details (VAT number, Tax Office, Headquarters Address).
- Bank details (IBAN) exclusively for the remittance of bookings or legal fees.
- Distribution channel credentials and API keys (if provided for integration).
B. Guests' Data
- Full name, email, phone number.
- Booking data (dates, origin platform e.g., Airbnb, Booking.com, booking amount).
- Identification and Tax details (Passport Number / Identity Card Number, VAT number, country of origin). Note: The collection of such compliance data is facilitated via third-party integrations (e.g., Chekin.com) to assist the Owner in submitting the required declarations to the respective local authorities (tax, police, or tourism authorities, depending on the jurisdiction). FoyerHost LLC acts solely as the technological bridge.
- Conversation and message history (including interactions managed by our Artificial Intelligence systems / AI Chatbot).
3. How We Use the Data and Legal Basis
Data processing is based on the performance of our contract, legal tax obligations, legitimate business interests, and explicit consent. The data is used exclusively for:
- 1. The seamless operation of the software (Channel Management, Dynamic Pricing).
- 2. Automated and manual communication with Guests, providing 24/7 support.
- 3. Exporting booking and guest data to facilitate the Owner and their external accountants in fulfilling their legal, tax, or regulatory obligations to the competent local authorities.
- 4. Secure processing of payments and subscription renewals.
4. Data Storage, Security & International Transfers
Server Location (EU)
All personal data is securely stored on Hetzner servers geographically located in Germany (within the European Economic Area - EEA), ensuring strict protection based on European standards.
International Transfers
As FoyerHost LLC is a US-based entity, any access to EU data from the US is conducted under strict compliance with the GDPR, utilizing Standard Contractual Clauses (SCCs) or equivalent legal frameworks to ensure data protection rights remain intact.
Security Measures
We implement modern encryption methods (SSL/TLS), regular backups, and strict access controls to prevent unauthorized access, alteration, or data leaks.
5. Sharing with Third Parties (Sub-Processors)
FoyerHost LLC does not sell or rent your personal data. Data transmission is executed only to strictly necessary, vetted third-party providers, bound by confidentiality and GDPR:
- Cloud Infrastructure Providers (Hetzner, Germany).
- Payment Management Platforms (Stripe).
- Channel management (Channex) and dynamic pricing (PriceLabs) platforms.
- Guest registration and legal compliance platforms (Chekin.com).
- Artificial Intelligence (AI) service providers (e.g., OpenAI or similar LLMs) strictly for communication automation and chatbot functionality.
- Cleaning and maintenance partners (sharing only the strictly necessary booking/access details).
6. Retention Period and Automatic Data Deletion
We implement a strict data minimization policy:
Owners' Data
Retained for as long as the account is active. Upon permanent account deletion, only strictly necessary billing information is retained for the period required by applicable corporate and tax legislation.
Guests' Data (Automatic Deletion)
Sensitive guest identification details (Passport Numbers, ID Numbers, VAT Numbers) collected for the Owner's compliance obligations are automatically and permanently deleted from our systems sixty (60) days after the check-out date of the respective booking. Simple message history may be retained as anonymized, non-identifiable data to improve and train our Artificial Intelligence algorithms.
7. Data Breach Notification
As a Data Processor, FoyerHost LLC is committed to notifying the Owner (Data Controller) without undue delay, and in any case within 48 hours, from the moment it becomes aware of any security breach leading to the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of personal data. The Owner remains responsible for notifying the end Guests and competent Data Protection Authorities, if required.
8. Minors' Data
Our services are not directed at individuals under the age of 18. Any data collection concerning minors (e.g., family bookings) is carried out exclusively through the adult guest who bears the legal responsibility (parent/guardian).
9. Your Rights
As data subjects, you retain the following rights under the GDPR:
Right of Access
To request a copy of the data we hold about you.
Right to Rectification
To request the correction of inaccurate data.
Right to Erasure ("Right to be Forgotten")
To request the deletion of your data, provided this does not conflict with legal retention obligations.
Right to Data Portability
To receive your data in a structured, commonly used format.
Note for Guests: If you are a Guest and wish to exercise your rights, your request must be addressed directly to the Property Owner / Manager (Data Controller), who will then issue the technical deletion instruction to the FoyerHost LLC platform.
10. Contact
For any questions, clarifications, or requests regarding this Privacy Policy and the management of your data, you can contact us:
See also our Terms of Use for the full legal framework.
Terms of Use