Privacy and your data

• Your account. Name, email, phone number, language, and your password stored only as a hash.
• What you do. Searches, saves, bookings, viewings, messages and reviews.
• Payments. References, amounts, refunds and agreements. Your card is handled by a licensed payment partner, and Vallo never holds your full card number.
• If you list or host. Your ID or NIN, business papers where they apply, any ownership document, and your payout account.
• Technical data. Device, browser and IP address, used to keep it working and secure.

The full document is the Privacy Policy. This page is the plain version. Where they differ, the policy governs.

• Your bookings, agreements, messages and settings are protected with row level security, so the database hands them only to you and to the people on the same deal.
• Gate details for a stay are shown only to the host, to Vallo staff, and to a guest with a confirmed booking.
• ID and ownership documents sit in a private store that only you and a reviewer can open.
• Data is encrypted in transit, and passwords are stored only as a hash.

The Nigeria Data Protection Act 2023 lets you:

• ask for a copy of what Vallo holds about you;
• ask for anything wrong to be corrected;
• ask for data Vallo has no lawful reason to keep to be deleted;
• object to, or ask to limit, some processing;
• ask for your data in a portable format;
• withdraw consent where processing rests on it.

Write through the contact form with Privacy as the subject. If the answer does not satisfy you, you can complain to the Nigeria Data Protection Commission.

• Hide my activity keeps your reviews and recent stays off your public page.
• Notification switches decide which emails reach you. Marketing is off until you turn it on.
• Data saver loads lighter images on a slow or metered connection.

1. Go to Settings, then Account, then Delete account.
2. Type DELETE MY ACCOUNT exactly, in capitals.
3. You are signed out everywhere, and your profile, posts and places go with it.

Two exceptions. Records of money that moved are kept as long as Nigerian financial and tax rules require. A post somebody replied to may stay as a marker that it was removed. Neither carries your identity. If deletion cannot finish, you are told, and given a way to have it done by hand.