Privacy Policy

1. What we collect

• Account details: name, email, phone number
• Identity verification: NIN or BVN (we store only the last four digits plus a one-way cryptographic hash — never the full number), a government-issued ID, and, at higher verification tiers, proof of address and source-of-funds documents
• Company verification (sellers/agents listing as a company): CAC registration number
• Listing and transaction data: properties listed, inspections booked, payments made, messages between a buyer and seller about a listing
• Payment details: the bank account a payment was sent from and the payout account funds are sent to — never full card numbers, which are handled entirely by our PCI-DSS-certified payment provider and never touch our servers
• Usage data: pages visited, device/browser type, and (if you arrived through a referral link) an anonymised, hashed visitor identifier used only to attribute that referral

2. Why we collect it

• To create and secure your account, and verify your identity to the level your transactions require
• To operate escrow: hold, track, and release funds against a specific transaction
• To review disputes, verifications, and withdrawal requests
• To detect and prevent fraud, duplicate accounts, and money laundering
• To meet our obligations under Nigerian law, including anti-money-laundering recordkeeping
• To pay affiliate commissions correctly and prevent duplicate crediting

3. Who we share it with

We share only what's necessary, and only with: our payment providers (to process payments and payouts), storage providers (to host uploaded documents and photos, in access-restricted buckets never publicly linked), and, where legally required, Nigerian regulators or law enforcement. We never sell your personal data.

Identity and ownership documents are never shown to other users — a buyer sees a "Verified" badge on a listing, never the underlying document. Chat between a buyer and seller about a listing is private between the two of them and is not read by our staff by default; it is only reviewed if one of you reports a problem on the transaction.

4. How long we keep it

We keep account and transaction records for as long as your account is active and for a period afterward to meet financial recordkeeping obligations. Financial history (completed transactions, payouts) is retained even if an account is later closed, since that record can't be deleted without breaking the audit trail regulators and dispute resolution depend on.

5. Your rights

Under the NDPR, you can ask us to:

• Confirm what personal data we hold about you and provide a copy of it
• Correct inaccurate data — some fields can be edited directly from your account
• Delete data we no longer have a legal or operational reason to keep
• Object to or restrict certain processing

We'll respond to a verified request within the timeframe the NDPR requires. Some data — particularly completed financial transactions — may need to be retained even after a deletion request, for the reasons in Section 4.

6. Cookies

We use strictly necessary cookies to keep you signed in, and a referral-attribution cookie if you arrive through someone's affiliate link (set for 30 days, tied to a hashed visitor identifier rather than your raw IP address). We don't use third-party advertising trackers.

7. Security

Every table in our database is protected by row-level security, so a user's own session can only ever read or write data that belongs to them — enforced by the database itself. Sensitive operations (payments, payouts, identity review) run in server-side code your browser never sees. All traffic is HTTPS-only.

8. Changes to this policy

We may update this policy as the platform changes. Material changes will be announced on the platform.

9. Contact

Questions about this policy, or a request under Section 5, can be raised from your account. See also our Terms of Service.