AI transparency
Artificial intelligence policy
Last updated: 19 October 2026
Version: 2026.10.19
Bookfilo uses AI as an assistive editorial tool for hosts, not as a replacement for human decisions or for decisions with legal effects on users.
1. Available AI function
At an eligible host’s request, the assistant writes a proposed Romanian description for their property. The function does not run secretly and does not automatically publish the result.
We do not use AI to confirm or reject bookings, set individual stay prices, assess creditworthiness, recognise biometrics or emotions, classify guests or exercise rights.
2. Data sent to the model
The prompt may include the title and existing description, property type, city/region/country, capacity, bedroom and bathroom counts, facilities, tags, attractions, room types and amenities, beds, occupancy and check-in/check-out times.
The code intentionally excludes contact details, exact address, coordinates, prices, availability, guest data, support conversations and payment data. Hosts must not enter unnecessary personal data, secrets or unlawful instructions in descriptive fields.
3. Provider, storage and transfers
The request is sent to the OpenAI API, supplied for EEA customers by OpenAI Ireland Ltd. (Ireland), with possible processing by affiliates and providers in the USA and other countries. We request store=false and use an HMAC-pseudonymised safety identifier rather than the raw user ID. Any new AI supplier, including a fallback, will be identified in this policy and the Privacy Policy before use for personal data.
Bookfilo does not use prompts or outputs to train its own model. store=false does not mean that the provider retains no data, including for security or legal obligations. OpenAI’s published transfer safeguards are described in Privacy Policy section 6 and the provider agreement: https://openai.com/policies/data-processing-addendum/.
4. What we store
The resulting draft is filtered to a limited set of HTML elements and kept in Redis for up to 10 minutes for delivery to the interface. It becomes part of the public description only if the host accepts and saves it.
For 90 days we retain metadata: user, property, purpose, status, provider/model, prompt version, input hash, token count, latency and error code. We then aggregate it into daily statistics without user/property IDs and delete individual records.
5. Human control and content labelling
AI may invent, omit or phrase things ambiguously. Hosts must check factual accuracy, legality, copyright, tone and absence of discrimination before publication and retain editorial responsibility for the description.
The interface identifies the function as an AI assistant. For editorial text reviewed and adopted by the host, Bookfilo retains internal generation traceability during the retention period. If we directly publish AI content or introduce a chatbot, we will apply the information and labelling required by Article 50 of Regulation (EU) 2024/1689.
6. Safety measures and limits
The supplied context is treated as untrusted data; instructions found in descriptions are ignored to reduce prompt injection. Output is stripped of scripts, styles, links and unsupported tags, checked for length, rate-limited and subject to controlled retry/failover.
These measures reduce but do not eliminate hallucinations, stereotypes, outdated information and errors. Do not use the result as legal, tax, medical or safety advice, or as evidence of a feature.
7. Rights and reports
You may choose not to use the function without losing core account functions. You may request access, deletion or information about associated metadata under the Privacy Policy and report a problematic result to [email protected].
This policy will be reviewed before introducing a new AI purpose, a significant automated decision or new data categories.