Privacy policy
Last updated 15 November 2026
Who we are
Doorman is a product of AxxisPoint, operated by Doorman Stays ("we", "us"). Doorman is a booking assistant that short-let hosts in Lagos use to answer guests on WhatsApp. This policy explains what we collect, why, and the choices you have, in line with the Nigeria Data Protection Act 2023.
When you message a host that uses Doorman, the host decides how your booking is handled, and Doorman processes your information for the host. For hosts using Doorman, we are responsible for your account information.
Messages are handled by an automated assistant
Replies to guests are written by an AI booking assistant, not a person. The host makes every booking decision: the assistant never approves a guest, confirms a payment or refunds a caution fee by itself. You can ask to speak to the host at any time.
What we collect
- Your WhatsApp profile name, phone number or WhatsApp user id, and the messages you send to the host.
- Booking details you give: dates, number of guests and the purpose of your stay.
- If you book: a photo of your ID, which we ask for only after you agree in plain words.
- If you pay: the transfer receipt you send, so the host can check the amount.
- For monthly stays: an employer letter or a reference, if the host asks for one.
- For hosts: name, business name, email, phone number, unit details, rates and house rules.
We collect only what the booking needs.
Why we use it
- To answer your questions, quote prices, hold dates and pass your booking to the host.
- To let the host check who is staying and that the payment matches.
- To keep a record of the house rules you agreed to, in case of a caution fee dispute.
- To keep the service secure and working.
We rely on your consent (for example, for your ID photo) and on the steps needed to arrange the stay you asked for. We never sell your information, and we never use your messages to train AI models.
Who processes it
- The host you are booking with.
- Meta (WhatsApp), which carries the messages.
- Anthropic, whose AI model reads messages to understand them and write replies.
- Supabase, which stores our database and files.
- DigitalOcean, which hosts our website and servers.
Some of these providers process data outside Nigeria. We use them under contracts that protect your information.
How long we keep it
- ID photos, payment receipts and employer or reference details: deleted automatically 7 days after checkout (a host can choose a different period).
- Messages and booking records: [retention period to be confirmed before launch].
Your rights
You can ask to see, correct or delete your information, object to how we use it, or withdraw consent. Email [email protected]. If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission.
Changes
We will update this page when the policy changes and show the date at the top.