Draft — this page has not been reviewed by a lawyer and must not be treated as final before [FILL IN: company legal name] launches paid billing.

Privacy Policy

Last updated: [FILL IN: publish date]

Who we are

Alri is a hotel property-management SaaS operated by [FILL IN: company legal name], registered at [FILL IN: registered address], [FILL IN: country/jurisdiction]. For privacy requests, contact [FILL IN: privacy contact email].

What we process, and why

Alri is used by hotel staff to run reservations, guest stays, and billing. Depending on which features a property enables, we process:

• Guest identity and stay data — name, contact details, an identity document collected at reservation creation, room and stay history, and any notes staff record — to fulfil the booking and, where the property enables fiscalization, to issue a legally required fiscal receipt to Albanian tax authorities.
• Payment data — when a guest pays online, card and payment details are handled directly by our payment processors (Stripe, PayPal, and/or Paysera, whichever a property has configured); we store the resulting transaction reference, not raw card numbers.
• Staff account data — name, email, role, and login activity, to operate access control and payroll features the property has enabled.
• Communications — booking confirmations and pre-arrival messages sent by email (via Resend) and, where a property connects its own number, WhatsApp Business messages; push notifications to staff devices who opt in.
• AI assistant queries — if a property's staff use the AI assistant, their questions and the property's own operational data needed to answer them are sent to Anthropic's API to generate a response. No data is used to train Anthropic's models beyond Anthropic's own standard API terms.

Who we share it with

We share data only with the processors needed to run the feature a property has enabled: our payment processors for online payments, Resend for transactional email, Meta for WhatsApp Business messages, Anthropic for the AI assistant, and — where a property enables it — Albania's fiscalization infrastructure via our fiscal provider, easyPos. We do not sell guest or staff data.

Tenant isolation

Alri is multi-tenant software used by many independent hotels. Each hotel's data is isolated from every other hotel's at the database level; hotel staff can only see data that belongs to their own property.

Retention and deletion

[FILL IN: retention period the business has decided on for guest records and fiscal documents — fiscal documents in Albania are typically subject to a statutory minimum retention period set by tax law, independent of this product]. [FILL IN: how a guest or staff member can request deletion, and how that request is fulfilled].

Your rights

[FILL IN: the specific rights offered — access, correction, deletion, portability — and the applicable law, e.g. Albanian Law No. 9887 "On Protection of Personal Data" and/or GDPR if serving EU guests].

Changes to this policy

We will update this page when what we process, or who we share it with, changes.