Privacy Policy

Loading…

Who we are

TekVwa Properties is operated by Tekvwa IT Solutions LTD ("TekVwa," "we," "us"), based in Ughelli, Delta State, Nigeria. This Privacy Policy explains how we collect, use, share, and protect your personal data, and should be read alongside our Terms & Conditions. For any privacy question or request, contact us at info@tekvwa.org.

Legal basis for processing

We process personal data in line with the Nigeria Data Protection Act (NDPA) 2023 and its implementing regulations. Depending on the activity, our legal basis is: performance of a contract (creating your account, publishing your listing, processing a payment), your consent (optional features such as saved-search email alerts), our legitimate interest (fraud prevention, platform security, service improvement), or a legal obligation we're subject to (financial recordkeeping, responding to lawful requests from Nigerian authorities).

Data we collect

• Account data: name, email, phone, role, hashed password, state/LGA.
• Identity verification: at registration, we require your 11-digit National Identification Number (NIN), which we submit once to our identity-verification partner, Dojah, to confirm it matches your registered name. We do not store the NIN itself — only the result (a verified status and timestamp) and a masked reference (last 4 digits) are retained. If you separately submit an additional identifier type and number for landlord KYC verification, that value is stored as provided.
• Property & listing content you or your landlord publish, including photos you upload.
• Property ownership documents: landlords verifying a listing upload a supporting document (such as a Certificate of Occupancy, Deed of Assignment, or Letter of Authority) and type the name it's registered to. These are stored privately and are visible only to you and to our staff during listing review.
• Messages exchanged with other users, and support/live-chat conversations with our team.
• Trust & Safety reports: if you or another user submits a safety concern or emergency report connected to your account, we keep the content of that report and links to any property, viewing, or message it references. This is visible only to our staff.
• Payment data: amounts, references, and status codes for payments you initiate. Card and bank details themselves are collected and processed directly by Paystack, our payment processor — we never see or store your full card number. For landlords using in-app rent collection, we store your settlement bank account (masked in every view except the one-time setup confirmation) so Paystack can route rent directly to you.
• Property viewing check-in: when you book a viewing, we generate a one-time numeric code — we store only a secure hash of it, never the code itself — so the landlord can confirm in person, at the time of the viewing, that it took place.
• Move-in condition photos: once a Rent Agreement is signed by both parties, either party may upload photos documenting the property's condition at move-in. These are visible only to the two parties to that agreement and our staff.
• Two-factor authentication: if you turn this on, we store the setup key that generates your login codes and a set of one-time backup codes (kept as secure hashes).
• Login and security data: IP address and an approximate location (city/country, resolved from that IP) at registration and each login, used for account security and fraud prevention.
• Mobile app data: if you use our Android or iOS app, we store a device token so we can deliver push notifications to you, and we automatically receive crash and error diagnostics from Google Firebase Crashlytics to help us find and fix bugs.
• Saved searches and your own usage data: filters you save to get notified about new matching listings and, if you're a landlord, aggregate figures (views, inquiries) for properties you own. This is never shared outside your own account.
• Technical data: session cookies essential for staying logged in, and server logs.

Automated review of your identity information

When a landlord submits a property for approval, we automatically compare the name confirmed by identity verification, the name on the landlord's payout bank account, and the name typed on any ownership document provided. A mismatch doesn't block the listing automatically — it creates an internal flag for a staff member to review by hand before the listing is approved.

Where your data is stored

Our infrastructure runs on Google Cloud Platform, hosted in Canada. This means your personal data is transferred to and processed outside Nigeria. We rely on Google Cloud's own data-protection safeguards and contractual commitments as the basis for this transfer, consistent with NDPA's cross-border transfer requirements. Payment data you enter at checkout is transmitted directly to Paystack, a Nigerian-licensed payment processor.

Who we share data with

We share data only where necessary to run the Platform: Paystack (payment processing), Dojah (identity verification — receives your NIN and the identity data it resolves to, in order to confirm it matches your registered name; we do not retain the NIN itself after that check), Google Cloud Platform and Google Firebase (hosting, file storage, and, for mobile app users, push notification delivery and crash diagnostics), and our email delivery provider (transactional emails such as receipts, verification codes, and one-time viewing check-in codes). We do not sell personal data. Broad user-listing views in our staff/admin tools mask national ID numbers by default; full identifiers, ownership documents, and Trust & Safety reports are visible only in the specific staff tools where that access is needed to do the job.

How long we keep your data

We retain account data for as long as your account is active. If you delete your own account, we anonymize it immediately — your name, email, phone, and similar identifying fields are scrubbed — but we keep the payment, agreement, and message records tied to it, because we have a legal obligation to be able to account for processed payments and because signed tenancy agreements are a historical record independent of either party's account status. If our staff remove an account instead — for example, in response to a fraud finding, a policy violation, or a verified erasure request — that removal is permanent and, unlike self-service deletion, also erases the payment, agreement, and message records tied to that account.

Your rights

Under the NDPA, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data — see "How long we keep your data" above for how this differs between deleting your own account and asking us to remove it for you; object to or request restriction of certain processing; request a portable copy of data you provided us; and withdraw consent at any time for processing that relies on it (this doesn't affect processing already carried out). To exercise any of these rights, email info@tekvwa.org — we'll respond within the time frame required by law.

Data breach notification

If a breach occurs that's likely to affect your rights, we will notify the Nigeria Data Protection Commission (NDPC) without undue delay and, where the risk to you is significant, notify you directly as required by the NDPA.

Children

TekVwa Properties is intended for users aged 18 and older, consistent with the legal capacity needed to enter a tenancy agreement. We do not knowingly collect personal data from anyone under 18.

Complaints

If you're unsatisfied with how we've handled your data or a request, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng, in addition to contacting us directly.

← Back to home