Privacy and your data

• Your account. Name, email, phone number, language, and your password stored only as a hash.
• What you do. Searches, saves, bookings, viewings, messages and reviews.
• Payments. References, amounts, refunds and agreements. Your card is handled by a licensed payment partner, and Vallo never holds your full card number.
• If you list or host. Your ID or NIN, business papers where they apply, any ownership document, and your payout account.
• Technical data. Device, browser and IP address, used to keep it working and secure.

VALLO SPACES LTD (RC 9870413), the company that runs Vallo, is responsible for this data under the Nigeria Data Protection Act 2023. Its registered office is Plot 5, Zone 6, Dutse Alhaji, Bwari Area Council, Federal Capital Territory, Abuja.

The full document is the Privacy Policy. This page is the plain version. Where they differ, the policy governs.

• Your bookings, agreements, messages and settings are protected with row level security, so the database hands them only to you and to the people on the same deal.
• Gate details for a stay are shown only to the host, to Vallo staff, and to a guest with a confirmed booking.
• ID and ownership documents sit in a private store that only you and a reviewer can open.
• Data is encrypted in transit, and passwords are stored only as a hash.

The Nigeria Data Protection Act 2023 lets you:

• ask for a copy of what Vallo holds about you;
• ask for anything wrong to be corrected;
• ask for data Vallo has no lawful reason to keep to be deleted;
• object to, or ask to limit, some processing;
• ask for your data in a portable format;
• withdraw consent where processing rests on it.

Download a copy of your data yourself from Settings, under Privacy. For anything else, write through the contact form with Privacy as the subject. If the answer does not satisfy you, you can complain to the Nigeria Data Protection Commission.

• Hide my activity keeps your reviews and recent stays off your public page.
• Notification switches decide which emails reach you. Marketing is off until you turn it on.
• Data saver loads lighter images on a slow or metered connection.

1. Go to Settings, then Account, then Delete account.
2. Finish or cancel anything still open, such as a booking or a published listing. The screen names it and links to it.
3. Confirm it is you, then type DELETE MY ACCOUNT exactly, in capitals.
4. You are signed out everywhere at once and nobody can reach your profile. Nothing is destroyed for 30 days, and the code we email you stops the deletion.
5. After 30 days your profile, posts, saved places and uploaded files are destroyed, and we email you when it is done.

What is kept: records of money that moved, for at least five years, because Nigerian anti-money-laundering law requires it, with your name, email address and phone number removed. Messages you sent stay in the other person’s conversation, shown as from a deleted account. The full list is on Delete your account.