Privacy Policy

1. Who we are

This Privacy Policy describes how RentPro Albania, operated by Albionix (“we”, “us” or “our”), collects, uses and protects personal data in connection with the RentPro Albania platform available at www.rentproalbania.com(the “Service”). For questions contact support@rentproalbania.com.

We are the “controller” of the personal data we process about you as a Customer of the Service. Where you upload personal data of your own end customers into the Service (for example to manage reservations), you act as the controller and we act as a “processor” on your behalf.

2. Information we collect

We collect the following categories of personal data:

• Account data: name, email, business name, phone number, password hash.
• Billing data: processed directly by Paddle — name, billing address, VAT number, payment method details. We receive a limited subset (customer ID, invoice history, subscription status) from Paddle.
• Usage data: pages viewed, features used, IP address, browser type, device identifiers, timestamps.
• Customer Data you upload: fleet records, reservation details, information about your own end customers and drivers. You are the controller of this data.
• Communications: content of messages you send to our support team.
• Cookies and similar technologies: used for authentication, preferences and analytics.

3. How we use your information

We process personal data to:

• provide, maintain and improve the Service;
• create and administer your account, authenticate users and secure access;
• process subscriptions and payments through Paddle;
• send service communications (billing notices, security alerts, product updates);
• respond to support requests;
• comply with legal obligations (tax, accounting, anti-fraud);
• protect the Service and users against abuse and fraud;
• with your consent, send marketing communications (you can opt out at any time).

4. Legal bases (EU/EEA users)

We rely on the following legal bases under the GDPR:

• Contract: to provide the Service you purchased.
• Legitimate interests: to secure, improve and market the Service.
• Legal obligation: to keep invoicing and tax records.
• Consent: for optional marketing emails and non-essential cookies (withdrawable at any time).

5. Sharing and third-party processors

We share personal data only with service providers who process it on our behalf under written data processing agreements. Our main processors are:

• Paddle.com Market Limited — Merchant of Record for all sales, handles billing, tax and fraud prevention.
• Google Cloud Platform — application hosting (Cloud Run) in the europe-west3 region.
• Vercel Inc. — hosting and content delivery for the public website.
• Google LLC — optional Google Sign-In for authentication.
• Email service providers — to deliver transactional and support emails.

We do not sell personal data. We disclose personal data to public authorities only when required by applicable law.

6. International transfers

Some of our processors are located outside the European Economic Area. Where this is the case, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. Data retention

We retain personal data for as long as your account is active and for as long as necessary to provide the Service. After account closure, account data is deleted or anonymised within 90 days, except where we are required to retain it for legal or accounting purposes (typically up to 10 years for invoicing records under Albanian law).

8. Your rights

Depending on where you live, you may have the following rights:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion (“right to be forgotten”);
• restrict or object to processing;
• portability — receive your data in a structured, machine-readable format;
• withdraw consent at any time, without affecting prior processing;
• lodge a complaint with your local data protection authority (in Albania: the Commissioner for the Right to Information and Protection of Personal Data, idp.al).

To exercise any right, email us at support@rentproalbania.com. We will respond within 30 days.

9. Cookies

We use the following categories of cookies and similar technologies:

• Essential: required to authenticate sessions and protect against CSRF.
• Functional: remember UI preferences.
• Analytics: Vercel Web Analytics — aggregated, cookie-less page view statistics. No cross-site tracking.

You can control cookies in your browser settings.

10. Security

We implement technical and organisational measures appropriate to the risk, including TLS in transit, encrypted storage at rest, access controls, least-privilege access and logging. No system is 100% secure; we notify you and the competent authority in the event of a personal data breach as required by law.

11. Children

The Service is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The “Last updated” date at the top of this page indicates when it was last revised.

13. Contact

RentPro Albania (operated by Albionix)
Email: support@rentproalbania.com