PropPortal ("we", "us", or "our") operates the PropPortal property management platform at propportal.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, in line with the Nigeria Data Protection Regulation (NDPR) and applicable Nigerian law.
1. Who we are
PropPortal is operated by PROPPORTAL DIGITAL SOLUTIONS LIMITED from Lagos, Nigeria. For data protection enquiries, contact us at support@propportal.app or privacy@propportal.app.
2. Information we collect
- Account data: name, email address, phone number, password (stored hashed), and role (tenant, applicant, admin, etc.).
- Identity & application data: National Identification Number (NIN), Bank Verification Number (BVN) where provided, employment details, occupant information, and uploaded documents (ID, bank statements, etc.).
- Payment data: transaction references, amounts, and payment status. Card and bank details are processed by regulated payment partners; we do not store full card numbers.
- Property & tenancy data: lease terms, rent amounts, maintenance requests, and communications related to your tenancy.
- Technical data: IP address, browser type, device information, and usage logs necessary to operate and secure the platform.
3. How we use your information
We process personal data to:
- Provide rental application, lease management, and rent collection services;
- Verify your identity (including NIN checks via approved KYC partners when enabled);
- Process payments and disburse funds to landlords;
- Send transactional emails and SMS (OTP, rent reminders, payment confirmations);
- Comply with legal obligations and respond to lawful requests;
- Improve platform security, reliability, and user experience.
4. Legal basis for processing (NDPR)
We rely on one or more of the following lawful bases:
- Contract: processing necessary to perform our agreement with you (e.g. tenancy, payments);
- Legal obligation: where required by Nigerian law or regulators;
- Legitimate interests: fraud prevention, platform security, and service improvement, balanced against your rights;
- Consent: where we ask for your explicit consent (e.g. optional marketing — not currently offered).
5. Sharing your information
We may share data with:
- Service providers: payment processing, transactional communications, identity verification, electronic signing, security, and cloud-hosting providers;
- Property managers & landlords: application and tenancy information relevant to properties you apply for or occupy;
- Authorities: when required by law, court order, or to protect rights and safety.
We do not sell your personal data.
6. Data retention
We retain personal data for as long as your account is active and as needed to fulfil the purposes above, including legal, accounting, and dispute-resolution requirements. Application and payment records may be kept for several years as required by financial and tenancy regulations.
When an account deletion is approved, we immediately remove or irreversibly replace profile, contact, banking, account-profile identity-verification, sign-in, and multi-factor authentication data. We retain only the minimum transaction, tenancy, application, fraud-prevention, and audit records for which a legal, accounting, security, or dispute-resolution basis remains. Those retained records are access-restricted and reviewed for deletion or further anonymisation when that basis ends.
7. Security
We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, access controls, and secure secret management. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
8. Your rights under NDPR
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate data;
- Request deletion where no lawful basis to retain exists;
- Object to or restrict certain processing;
- Withdraw consent where processing is consent-based;
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise these rights, use Settings → Request account deletion in the landlord or tenant portal, or email privacy@propportal.app. We will respond within the timeframe required by NDPR (typically 30 days). Deletion is reviewed, not instant — we retain records where a lawful basis exists (for example leases and completed payments).
9. International transfers
Some service providers may process data outside Nigeria (e.g. US-based cloud infrastructure). Where this occurs, we ensure appropriate safeguards consistent with NDPR requirements.
10. Children
PropPortal is not intended for users under 18. We do not knowingly collect data from minors.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use after changes constitutes acceptance where permitted by law.