Privacy policy

1. Who we are

EasyHost is a pre-launch hospitality service operated from Tirana, Albania. We are the data controller for the personal data described in this policy. You can reach us at hello@easyhost.pro for any privacy-related question.

2. What we collect

We collect only what we need to keep you informed and to operate the service:

• Your email address — when you join the waitlist or create an account.
• Your name (optional) — only if you provide it during account creation.
• Your language preference — derived from your browser or your selection on the site.
• Technical metadata — the page you signed up from (for example, hero or pricing), the timestamp, and standard server logs (IP, user agent) kept briefly for security.
• Authentication data — managed by our auth provider Clerk. We never see or store your password.

3. Why we use it

We use your information for the following purposes:

• To notify you when EasyHost is ready to use.
• To send you a confirmation that you joined the waitlist or created an account.
• To let you sign back in with the same credentials when the product launches.
• To understand which pages drive sign-ups (in aggregate, never to profile you).
• To keep the service secure and operational.

4. Legal bases for processing (GDPR)

If you are in the European Economic Area or the UK, we rely on the following legal bases under Article 6 of the GDPR:

• Consent — you gave it when you submitted your email. You can withdraw it at any time by emailing us.
• Performance of a contract — to create and maintain your account so you can use EasyHost when it launches.
• Legitimate interests — to keep the service secure and to understand which marketing pages work, balanced against your rights.

5. Who we share your data with

We do not sell your data. We use a small number of trusted vendors who process data on our behalf, under written data processing agreements:

• Clerk — authentication, US-based, GDPR-compliant.
• Supabase — database hosting, with EU data residency.
• Resend — transactional email delivery, GDPR-compliant.
• Vercel — website and app hosting, GDPR-compliant.

6. International transfers

Some of our vendors are located outside the EEA, primarily in the United States. When data is transferred internationally, we rely on Standard Contractual Clauses approved by the European Commission and on each vendor's own safeguards. You can contact us for more details.

7. How long we keep it

We keep your waitlist entry and account data for as long as you want to be notified or use the service. You can ask us to delete your data at any time by emailing hello@easyhost.pro and we will erase it within 30 days, except where we are legally required to retain it.

8. Your rights

Under the GDPR and similar laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Have your data erased.
• Restrict or object to how we use it.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

9. Cookies and similar technologies

We use a minimal set of cookies:

• Authentication cookies set by Clerk — required to keep you signed in.
• A language preference cookie (easyhost-locale) so the site loads in your language.

10. Children

EasyHost is built for adults who host short-term rentals. The service is not directed at children under 16, and we do not knowingly collect data from them.

11. Changes to this policy

We may update this policy from time to time. The date at the top of the page reflects the most recent change. Material changes will be communicated by email where possible.