Your data and your rights

• Account data. Your name, email, phone number, language, and your password stored only as a hash.
• Booking data. What you looked at, what you booked, the dates, the guests, your messages with agents, and your reviews.
• Payment data. References, amounts, refunds and your wallet statement. Card details are handled by licensed Nigerian payment processors and we never hold your full card number.
• Agent verification data, if you apply: your NIN or government ID, business registration where it applies, and your payout account.
• Technical data. Device, browser, IP address and how you move through the product, used to keep it working and secure.

The full document is the privacy policy. This chapter is the plain-language version of it.

Every table in the database has row level security switched on. That is not a setting in the application that a bug could skip past: the database itself refuses to hand your rows to anybody who is not you. Your wallet, your bookings, your messages and your settings are all reached that way.

Gate details are the sharpest example. They are readable by the agent, by an administrator, and by a guest holding a confirmed booking on that listing, and by nobody else, and the rule is enforced by the database rather than by a screen deciding what to draw.

Data is encrypted in transit, passwords are hashed, agent documents live in a private store reached through short-lived links, and payments run through licensed providers.

The Nigeria Data Protection Act 2023 gives you rights over your personal data, and they are real rights you can exercise here:

• Ask for a copy of what we hold about you.
• Ask us to correct anything inaccurate or incomplete.
• Ask us to delete what we have no lawful reason to keep.
• Object to, or ask us to restrict, certain processing.
• Ask for your data in a portable format.
• Withdraw consent where the processing rests on consent.

To exercise any of them, write to us through the contact form with Privacy as the subject. We answer within the timelines the NDPA sets. If our answer does not satisfy you, you can complain to the Nigeria Data Protection Commission.

• Hide my activity keeps your reviews and recent stays off your public page.
• Notification switches decide what email reaches you. Marketing is off until you turn it on.
• Data saver serves lighter images, which matters on a metered connection.
• Language and appearance are yours and are remembered.

Settings, then Account, then Delete account. You are asked to type DELETE MY ACCOUNT exactly, in capitals, because this cannot be undone.

It is a real deletion. Your sign-in is removed, you are signed out everywhere, and your profile, your posts, your places and everything else keyed to you goes with it. Nothing is left behind as a hidden row waiting to be reactivated, and the platform is deliberately built so that no counter, no record and no cascade anywhere can block a person from leaving.

Two honest exceptions. Financial records connected to money that actually moved are kept for as long as Nigerian financial and tax rules require, and content somebody else has already replied to may remain as a marker showing it was removed, so a conversation does not become unreadable. Neither one carries your identity.

If deletion cannot complete for a technical reason, you are told plainly and given a way to have it done by hand. You are never shown a confirmation for something that did not happen.