Property360 (“we”, “our”, or “us”) operates the Property360 mobile application and the api.property360.africa service (together, the “Service”). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have under the Nigeria Data Protection Act, 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR).

Property360 is intended for landlords, tenants, and property managers operating in Nigeria. By using the Service you agree to this Policy.

1. Information We Collect

1.1 Information you provide

Account details: full name, email address, Nigerian mobile number (+234 format), password, role (landlord, tenant, or property manager), and profile photo.
Identity verification (KYC): one of National Identification Number (NIN), Driver's Licence, International Passport, or Voter's Card, plus a photo of the document. We use this to verify identity and reduce fraud on the platform.
Property & lease data: property addresses, unit details, lease terms, fee structure (security deposit, caution fee, agent fee, agreement fee, legal fee, service charge), and tenancy agreements.
Payment & payout details: bank account details for landlord payouts; payment instrument data is collected and stored by our payment processor (see §3) — we do not store full card numbers.
Documents you upload: tenancy agreements, maintenance request photos, and other files you choose to share.
Communications: in-app chat messages, maintenance requests, and support correspondence.

1.2 Information collected automatically

Device information (model, OS version, app version, language).
IP address and approximate location derived from it.
Usage events and crash logs used to diagnose problems and improve the Service.
Authentication tokens and session identifiers.

1.3 Information from third parties

Payment confirmation and transaction status from our payment processor.
E-signature events (signed, declined, voided) from our e-signing provider.

2. How We Use Your Information

To create and manage your account and authenticate you.
To provide core features: property and unit management, lease creation, invoicing, rent collection, payouts to landlords, maintenance requests, and in-app chat.
To verify your identity through KYC checks before activating sensitive features.
To process payments and remit landlord payouts.
To extract structured data from uploaded tenancy agreements via optical character recognition.
To send you service notifications (e.g. invoice issued, payment received, lease expiring) by push, in-app banner, and email.
To respond to support requests and enforce our Terms.
To comply with legal obligations including anti-money-laundering and tax reporting where applicable.

3. Third-Party Service Providers (Sub-processors)

We use the following providers to deliver the Service. Each receives only the data necessary for the purpose listed and is contractually bound to safeguard it.

Paystack Payments Limited — card, bank transfer, and USSD payment processing; landlord payouts via the Paystack Transfer API. (Nigeria)
Cloudinary Ltd. — storage and delivery of images and PDF documents you upload (profile photos, tenancy agreements, maintenance photos). (Israel / EU / US)
Google LLC — Document AI — OCR processing of uploaded tenancy agreements to extract structured fields. Documents are processed in transit and not retained by Google for model training. (US / EU)
Resend, Inc. — delivery of transactional email (e.g. password reset, invoice notifications, signed agreements). (US)
MongoDB, Inc. — Atlas (Frankfurt region) — primary database hosting. (Germany / EU)
Render Services, Inc. — application hosting for the API. (Germany / EU)
Apple Inc. and Google LLC — mobile push notification delivery via APNs and FCM respectively.

We do not sell your personal data and we do not share it with advertisers.

4. Sharing Within the Platform

Landlords can see the tenants assigned to their properties (name, contact, lease, payment history).
Tenants can see the landlord (or assigned property manager) for their unit and the property details.
Property managers acting on a landlord's behalf can see the same data the landlord has authorised them to access via per-property permission flags.
Marketplace listings show the property details you publish; your direct contact is shown only after a reservation request.

5. International Data Transfers

Your data may be processed outside Nigeria — primarily in the European Union (Germany) and the United States — by the providers named in §3. Where required by the NDPA, we rely on adequacy decisions, standard contractual clauses, or your informed consent for these transfers.

6. Data Retention

Account data is retained for as long as your account is active.
When you delete your account, your personal identifiers are anonymised rather than hard-deleted, so historical lease and payment records remain accurate for the counterparties (landlord ↔ tenant) and for our legal and tax obligations. Anonymised records cannot be re-associated with you.
KYC documents are retained for 5 years after the end of the relationship for anti-money-laundering compliance, then deleted.
Payment records are retained for 7 years to meet Nigerian tax and accounting obligations.
Crash and diagnostic logs are retained for 90 days.

7. Your Rights

Under the NDPA you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion (subject to the retention exceptions in §6).
Object to or restrict certain processing.
Receive a copy of your data in a portable format.
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, email privacy@property360.africa. To delete your account specifically, you can use our self-service form at property360.africa/delete-account — no login required. We respond within 30 days.

8. Security

All traffic between the app and our servers is encrypted with TLS 1.2+.
Passwords are hashed (never stored in plaintext) and authentication tokens are short-lived.
Access to production data is restricted to authorised personnel and audited.
Payment card details are never transmitted to or stored on our servers — they go directly to Paystack.

No system is perfectly secure. If you believe your account has been compromised, contact support@property360.africa immediately.

9. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact privacy@property360.africa and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified through the app or by email at least 14 days before they take effect. The “Last updated” date at the top of this page always reflects the current version.

11. Contact

Property360
Lagos, Nigeria
Privacy enquiries: privacy@property360.africa
General support: support@property360.africa
Legal: legal@property360.africa