PropPortal ("we", "us", or "our") operates the PropPortal property management platform at propportal.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, in line with the Nigeria Data Protection Act 2023 and other applicable Nigerian data-protection requirements.
1. Who we are
PropPortal is operated by PROPPORTAL DIGITAL SOLUTIONS LIMITED from Lagos, Nigeria. For data protection enquiries, contact us at support@propportal.app or privacy@propportal.app.
2. Information we collect
- Account data: name, email address, phone number, password (stored hashed), and role (tenant, applicant, admin, etc.).
- Identity & application data: National Identification Number (NIN), Bank Verification Number (BVN) where provided, employment details, occupant information, and uploaded documents (ID, bank statements, etc.).
- Payment data: transaction references, amounts, and payment status. Card and bank details are processed by regulated payment partners; we do not store full card numbers.
- Property & tenancy data: lease terms, rent amounts, maintenance requests, and communications related to your tenancy.
- Event and venue data: venue listings, booking dates, guest counts, event requirements, agreements, payment and refund status, operational checklists, guest-provided caterer notes, inspection records, incident reports, and related photos or documents.
- Technical data: IP address, browser type, device information, and usage logs necessary to operate and secure the platform.
- Native iOS and Android apps: Face ID or fingerprint is used only on your device to unlock the app (we do not store biometric templates). Photos you take or choose are uploaded for listings, maintenance, applications, or inspections. Push notification device tokens are stored so we can send account alerts (rent due, application updates). The native apps do not load Google Tag Manager or advertising SDKs.
3. How we use your information
We process personal data to:
- Provide rental application, lease management, and rent collection services;
- Verify your identity (including NIN checks via approved KYC partners when enabled);
- Process payments and disburse funds to landlords;
- Operate event venue discovery, booking, signing, payment, refund, and event-day workflows;
- Send transactional emails and SMS (OTP, rent reminders, payment confirmations);
- Comply with legal obligations and respond to lawful requests;
- Improve platform security, reliability, and user experience.
4. Legal basis for processing
We rely on one or more of the following lawful bases:
- Contract: processing necessary to perform our agreement with you (e.g. tenancy, payments);
- Legal obligation: where required by Nigerian law or regulators;
- Legitimate interests: fraud prevention, platform security, and service improvement, balanced against your rights;
- Consent: where we ask for your explicit consent (e.g. optional marketing — not currently offered).
5. Sharing your information
We may share data with:
- Service providers: payment processing, transactional communications, identity verification, electronic signing, security, and cloud-hosting providers;
- Property managers & landlords: application and tenancy information relevant to properties you apply for or occupy;
- Construction project participants: project records, documents, activity, and approval evidence are shared only with the project owners, managers, team members, and invited guests authorised for that project;
- Event participants: booking details are shared only with the relevant venue owner and authorised booking officers, office administrators, site staff, and the customer. Each role receives only the information needed for its operational task;
- Authorities: when required by law, court order, or to protect rights and safety.
We do not sell your personal data.
6. Data retention
We retain personal data for as long as your account is active and as needed to fulfil the purposes above, including legal, accounting, and dispute-resolution requirements. Application and payment records, including event agreements, refunds, and incident evidence, may be kept for several years where required for financial, safety, contractual, or dispute-resolution obligations.
When an account deletion is approved, we immediately remove or irreversibly replace profile, contact, banking, account-profile identity-verification, sign-in, and multi-factor authentication data. We retain only the minimum transaction, tenancy, application, fraud-prevention, and audit records for which a legal, accounting, security, or dispute-resolution basis remains. Those retained records are access-restricted and reviewed for deletion or further anonymisation when that basis ends.
7. Security
We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, access controls, and secure secret management. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
8. Your data-protection rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate data;
- Request deletion where no lawful basis to retain exists;
- Object to or restrict certain processing;
- Withdraw consent where processing is consent-based;
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise these rights, open propportal.app/delete-account, use Settings → Account deletion in the app to submit an authenticated request. If you cannot access your account, email privacy@propportal.app. We will respond within the timeframe required by applicable law. Deletion is reviewed, not instant — we retain records where a lawful basis exists (for example leases and completed payments).
9. International transfers
Some service providers may process data outside Nigeria (e.g. US-based cloud infrastructure). Where this occurs, we apply safeguards required by applicable Nigerian data-protection law.
10. Children
PropPortal is not intended for users under 18. We do not knowingly collect data from minors.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use after changes constitutes acceptance where permitted by law.