Privacy Notice

Plain language, because that is the whole point of AlbScore. This notice explains what data we hold about you, why, and the rights you have over it.

Who is responsible

AlbScore ("we") is the data controller for the personal data processed on this platform. Contact for all privacy matters: arsendoda@gmail.com. We process personal data in line with Albania's Law No. 124/2024 "On Personal Data Protection", Kosovo's Law No. 06/L-082 "On Protection of Personal Data", and the principles of the EU GDPR.

What we collect

• Account data — your name, email address, country (Albania or Kosovo), and a salted scrypt hash of your password. We never store your password itself.
• Financial details you provide — payment history counts, debts, credit limits, income, account ages, credit types, and recent applications, exactly as you enter them in the score form.
• Bank statement uploads (optional) — if you import a CSV statement, it is parsed in memory to estimate income, debt payments, and history length. The statement file itself is not stored; only the derived figures you choose to save in your profile are kept.
• Score history — each time you save your profile we record the resulting score and date (up to 60 entries), so you can see your trend.
• Consent shares — when you share your score with a lender we store the share code, the lender name you entered, its validity window, and an access log of when it was viewed.

We do not use advertising trackers, analytics cookies, or third-party profiling. The only browser storage used is your session token and language preference.

Why we process it (legal basis)

• Consent — you explicitly agree at signup to the processing of the financial details you provide, for the sole purpose of calculating and explaining your score. You may withdraw consent at any time by deleting your account.
• Contract — keeping your account, profile, and score history working.
• Your explicit, revocable consent — a lender can see your score only through a consent code you create, and you can revoke it at any moment.

Who sees your data

Nobody, unless you decide otherwise. A lender who enters a valid, unexpired, unrevoked consent code sees your name, country, score, band, and factor summary — never your raw financial inputs, email, or history. Every access is logged and visible to you. We do not sell or transfer personal data to anyone.

How long we keep it

Until you delete it. Your account, profile, history, shares, and sessions are erased immediately and permanently when you use "Delete account". Consent shares expire automatically after at most 90 days. Password-reset links expire after 60 minutes; email-confirmation links after 7 days.

Your rights

• Access & portability — "Export my data" downloads everything we hold about you as JSON, instantly.
• Erasure — "Delete account" removes everything, immediately, no questions asked.
• Rectification — every input is yours to edit at any time; your score recalculates from what you enter.
• Withdrawal of consent — revoke any lender share with one click; delete your account to withdraw entirely.
• Complaint — you may complain to the Information and Data Protection Commissioner (IDP) in Albania or the Information and Privacy Agency (AIP) in Kosovo.

Security

Passwords are hashed with scrypt and a per-user salt. Session and email tokens are stored only as SHA-256 hashes. Login, password-reset, and lender-check endpoints are rate-limited. Data lives in a server-side database that is never exposed directly to the internet.

What AlbScore is not

AlbScore is not a licensed credit bureau and holds no data from the Bank of Albania Credit Registry or the Central Bank of Kosovo. Scores are educational estimates computed from information you provide. If that changes through licensed partnerships, this notice will be updated and your fresh consent will be requested first.

Changes

If this notice changes materially, we will show you the new version and ask you to agree before continuing to use your account. Version history starts at 1.0 (signup consent) — this is version 1.1.