Privacy Policy

We collect information you provide directly when you create an account, complete identity verification, list a property, make a payment, or communicate through the platform. This includes:

• Identity data: Full name, email address, phone number, profile photo, and date of birth.
• Verification data: Government-issued ID (NIN, Voter's Card, Passport), BVN, and live selfie images used strictly for KYC compliance.
• Property data: Listing details, photos, videos, and address information provided by agents and landlords.
• Financial data: Payment and purchase records, wallet and escrow transaction history, payout account details, and financial information you provide with a property application. Payment details are processed by the relevant payment provider or app store.
• Location data: Approximate location derived from network information and, when you choose to permit it, precise device location for property discovery, maps, and directions. Property addresses and location preferences may also be provided directly by you.
• Device & usage data: Device identifiers, device model, OS version, app interactions, searches, diagnostics, and crash or performance logs.
• Communications and uploads: In-app messages, voice recordings, photos, videos, uploaded documents, feedback, and other content you choose to provide.

We use the information we collect solely to operate, improve, and secure the RentEase 9ja platform. Specifically:

• Verify your identity and maintain the integrity of our user registry.
• Facilitate property listings, rental applications, tenancy agreements, and escrow payments.
• Process and disburse payments through our escrow and wallet infrastructure.
• Send transaction confirmations, account alerts, and security notifications.
• Detect, investigate, and prevent fraudulent transactions and platform abuse.
• Provide customer support and respond to your enquiries.
• Provide maps, relevant property results, sponsored listing placements, analytics, and performance improvements.

We do not share your personal information with third parties except in the following limited circumstances:

• Between platform users: Agents, landlords, and tenants see only the profile information necessary to complete a rental or purchase transaction.
• Payment processors and app stores: Paystack handles supported property and wallet payment flows. Google Play or Apple processes applicable digital-feature purchases made through those stores. Providers receive the information needed to process, verify, and reconcile the payment. We do not store full card numbers.
• Service and SDK providers: Authentication, identity verification, media storage, notifications, communications, maps, and diagnostics use the providers listed below. SDK providers may receive approximate/IP-derived location, device identifiers, app interactions, and diagnostics for analytics and service improvement. Information you choose to send to another user or external app is also shared as part of that action.
• Legal compliance: We may disclose information when required by Nigerian law, court order, or to comply with Anti-Money Laundering (AML) and data-protection law (the Nigeria Data Protection Act 2023).
• Fraud prevention: We may share data with fraud prevention services to protect all users on the platform.

We implement industry-standard security measures to protect your information from unauthorised access, alteration, disclosure, or destruction:

• Data sent between the app and our services is encrypted in transit using HTTPS/TLS. Access to stored records is restricted according to the service and the user's role.
• Messages are encrypted in transit using TLS and stored securely on our servers. Our staff do not access message content in the ordinary course; access is limited to what is necessary for customer support, dispute resolution, fraud/safety investigations, or compliance with legal obligations.
• Card entry is handled by the relevant payment processor or app store. We never store raw card details.
• Multi-factor authentication (MFA) and biometric login options are available to all users.

Despite our best efforts, no method of transmission or storage is 100% secure. We encourage you to use a strong password and never share your login credentials.

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data: After account ownership is verified, eligible personal data is deleted or anonymised within 30 days of a deletion request. We do not apply a blanket 12-month retention period to all deleted accounts.
• Active tenancies and ongoing matters: We retain only the records still needed to administer an active tenancy or transaction, resolve a dispute, prevent fraud, or comply with a legal obligation. These records are access-restricted and kept only while that purpose or an applicable retention requirement continues; they do not keep your public account active.
• Transaction records are retained for 7 years in compliance with Nigerian financial regulations.
• KYC documents are retained for 5 years in compliance with the Money Laundering (Prevention & Prohibition) Act 2022.

You may request deletion at any time through account settings or our account deletion page. Our Privacy team can explain which records must be retained for an active tenancy or another continuing obligation.

RentEase 9ja is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe a minor has created an account, please contact us immediately at privacy@rentease9ja.com and we will promptly delete the account and associated data.

Under the Nigeria Data Protection Act (NDPA) 2023, you have the following rights regarding your personal data:

• Right of Access: Request a copy of all personal data we hold about you.
• Right of Rectification: Correct any inaccurate or incomplete information in your profile.
• Right of Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to Object: Object to certain types of processing, including profiling.
• Right to Portability: Receive your data in a structured, machine-readable format.

To exercise any of these rights, email privacy@rentease9ja.com. We will respond within 30 days.

The app integrates with the following third-party services, each with their own privacy policies:

• Paystack, Payment processing.
• Google Play and Apple, Applicable in-app digital purchases and purchase verification.
• Smile ID, Identity verification. Processes selfie/liveness images, ID documents, and BVN/NIN checks against government records as part of KYC.
• ZegoCloud, In-app voice and video calls.
• Cloudinary, Secure media (photo/video) storage.
• Firebase, Supported Google/Apple sign-in and push notifications.
• Google Maps, Maps, property discovery, and directions. Maps SDKs may process location, device identifiers, interactions, and diagnostics to operate and improve their services.
• Resend, Transactional email delivery.
• Sentry, Error monitoring and crash reporting.
• Plausible, Privacy-friendly, cookieless website analytics.
• Tawk.to, Live-chat support widget on our website (loads only if you accept cookies).

We only share data with these providers to the extent necessary to deliver our services. We require all third-party processors to treat your data in accordance with this policy.

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top and notify you via the app or email at least 30 days before material changes take effect. Continued use of the app after the effective date constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please reach out to our Data Protection team.