Privacy Policy

1. Who controls your data

Veturio is currently a working name for the Tirana pilot. The final operating legal entity, registered address and privacy contact must be inserted here before public launch. Until then, this policy documents how the local pilot is designed to handle personal data.

2. Data we collect

• Account data: name, email, phone number, date of birth, sign-in method, language, theme preference and security activity.
• Vehicle and service data: registration details, mileage, booking notes, quotes, appointments, messages, approvals, reports, invoices, photos and service history.
• Workshop data: business identity, NIPT/NUIS, contacts, services, capacity, verification documents, pricing, availability and reviews.
• When online payment is enabled: payment status, amount, currency, provider references and limited reconciliation details returned by the processor, such as payment method, bank or card issuer, masked payment handle, card last four digits and transaction reference. Veturio does not receive or store a card PIN, CVV, full card number or the customer's full bank-account number.
• Technical data needed for security and operation, including session cookies and delivery/error records.
• Google sign-in data when chosen: verified email, name, profile image and Google account identifier. Veturio never receives your Google password.

3. Why we use it

• To create and secure accounts, match service requests, enable quotes and bookings, document authorised work, maintain vehicle records and provide support.
• To verify workshops, prevent misuse, keep financial and commission records, comply with legal duties and resolve disputes.
• To send essential service and security communications. Optional marketing is sent only when separately selected and can be stopped at any time.

4. Legal grounds

Depending on the activity, processing is necessary to provide the requested service or perform a contract, comply with law, protect legitimate interests such as platform security and dispute prevention, or act on consent. Optional marketing consent is separate from account creation.

5. Who receives data

• The selected workshop receives customer contact details after the customer accepts its offer. Public workshop contact details may appear on verified workshop profiles. Workshops do not receive the customer's payment-account details from Veturio.
• Customers see relevant verified workshop identity, quote, report and review information.
• Hosting, storage, authentication, email and any activated payment provider may process limited data under service agreements and their applicable notices.
• Authorities or professional advisers receive data only when legally required or necessary to protect rights.

6. Storage, transfers and retention

Pilot records are stored in Veturio's configured database and private file storage. Before production launch, the operator must document hosting locations, international transfer safeguards and vendor agreements. Data is kept only while needed for the account, booking history, safety, tax, fraud prevention, legal claims or mandatory retention. Deactivation does not automatically erase records needed for completed bookings or legal obligations.

7. Your rights

• Ask for access, correction, deletion, restriction, portability or an explanation of how your data is used.
• Object to processing based on legitimate interests and withdraw consent without affecting earlier lawful processing.
• Complain to Albania's Information and Data Protection Commissioner or another competent authority.

8. Security and children

Veturio uses access controls, expiring sessions, hashed passwords and tokens, private file permissions and account-owned records. No system is risk-free. Accounts are intended for adults aged 18 or older; Veturio does not knowingly offer the service to children.

9. Contact and changes

A dedicated privacy email and the final controller identity will be published before launch. Material policy changes will receive a new version and, where required, fresh notice or consent.