Privacy Policy
This policy explains how AppAlbania, Tiranë, Shqipëri (“we”, the data controller) processes personal data when you use h.appalbania.com and AppAlbania Host services, in line with Albanian personal data protection law.
1. Data we collect
- Account: name, email, phone (optional), language, password (hash only), 2FA data (encrypted).
- Service: plan, domains, site titles, subscription status.
- Billing: invoices and payment status. Card details are processed only by Stripe; we never see or store them.
- Support: the messages and migration requests you send us.
- Technical: IP address, time of sign-ins and important actions, for security and abuse prevention.
2. Why we use it and the legal basis
- to provide the service and perform our contract with you (creating hosting, billing, support);
- to meet legal obligations (accounting, tax, requests from authorities);
- for legitimate interests (security, preventing fraud and attacks, improving the service);
- with your consent where required (for example WhatsApp notifications).
3. Who we share it with
Only processors we need for the service, under agreements and security measures: Stripe (payments), our server infrastructure partners and the data centres where the sites are stored, Cloudflare (DNS, security, performance), our email provider and our WhatsApp gateway (AppAlbania). Some of them may process data outside Albania (e.g. the EU, the US) with appropriate safeguards. We do not sell your data.
4. How long we keep it
- account data: while the account is active and up to 30 days after it is closed;
- invoices and accounting records: for the period required by tax and accounting law;
- security logs: up to 12 months, unless needed for an incident or a legal request.
5. Security
Passwords are stored only as hashes, 2FA secrets are encrypted, connections use HTTPS, and our own access to data is restricted. No system is 100% secure; if a breach happens we notify you as the law requires.
6. Your rights
You can ask for access, correction, deletion, restriction, objection to processing and portability of your data. You can change your name, email and password yourself in your Profile. For anything else write to [email protected]. You can complain to the Commissioner for the Right to Information and Personal Data Protection.
7. Cookies
We use only necessary cookies: your sign-in session, your chosen language, and Cloudflare’s security and anonymous analytics cookies. We do not use advertising cookies.
8. Customers’ own sites
For data our customers collect on their own sites, the customer is the controller and we act only as a processor storing it on their behalf.
9. Changes
We may update this policy; the date at the top shows the last update. We will tell you about important changes.