Privacy Policy

1. Who we are

AlbSpeed ("TrueVIN", "we", "us") operates the TrueVIN vehicle history report service. This policy explains how we collect, use, and protect your personal data when you use our website and services.

2. Data we collect

Account information

When you register, we collect your email address, phone number, and a hashed password. Passwords are hashed with PBKDF2 (210,000 iterations) and are never stored in plain text.

VIN lookup data

When you request a vehicle history report, we process the Vehicle Identification Number (VIN) you provide. We store the VIN, the resulting report data, and your order history to deliver and display your reports.

Payment data

Payments are processed by PokPay, our third-party payment provider. We never receive or store your full card number, CVV, or other sensitive payment details. We store only the order reference and payment status returned by PokPay.

Technical data

Our servers automatically log IP addresses, request timestamps, and browser user-agent strings for security and debugging purposes. These logs are retained for up to 30 days.

3. How we use your data

• To create and manage your account
• To generate and deliver vehicle history reports
• To process payments through PokPay
• To communicate with you about your orders
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. Third-party services

We share data with the following providers only as necessary to deliver our service:

• GlobalVIN — receives the VIN you submit and returns vehicle history data. Their processing is governed by their own privacy policy.
• PokPay — processes your payment. They receive your email and payment details directly. See PokPay's privacy policy for details.
• Railway — hosts our application infrastructure within the EU/US.
• Google Analytics — collects anonymous usage data (pages visited, session duration, device type) to help us improve the service. Only active if you consent to analytics cookies.
• Meta (Facebook Pixel) — tracks ad conversions and helps deliver relevant advertisements. Only active if you consent to marketing cookies.

We do not sell your personal data to any third party.

5. Cookies

We use essential cookies for authentication and language preferences, and — with your consent — analytics and marketing cookies to improve the service and measure advertising. When you first visit, a consent banner lets you choose which non-essential cookies to accept. See our Cookie Policy for full details on each cookie we use.

6. Data retention

Account data is retained for as long as your account is active. Vehicle reports and order history are retained for your continued access. You may request deletion of your account and associated data at any time by contacting us.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request a portable copy of your data

To exercise any of these rights, contact us at platform.albspeed.al.

8. Security

We protect your data with industry-standard measures including encrypted connections (HTTPS), hashed passwords, HTTP-only authentication cookies, rate limiting, and access controls. No system is perfectly secure; if you discover a vulnerability, please report it to us responsibly.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the service. Your continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions, contact us at platform.albspeed.al.