Privacy Policy

1. What we collect

Information you give us

• Account data: name, email address, password (stored only as a salted hash), account type, phone and WhatsApp numbers, country and city, profile photo, bio, company name and website.
• Listing data: property descriptions, addresses and map locations, prices, photos, videos, floor plans and any other material you upload.
• Verification data: ownership or authority documents and ID you choose to upload, and the reviewer’s decision and notes.
• Messages and interactions: chat messages and attachments, connection requests, inspection bookings, favourites, collections, saved searches, reviews and reports.
• Rent records: tenancy details (property, tenant name and email, rent amount and schedule), payment references, optional proof of payment, receipts, and the bank or mobile-money account details a landlord chooses to show tenants.
• Billing data: plan, subscription and payment history for paid services. We do not store full payment card numbers.
• Support data: anything you send to our team.

Information collected automatically

• Device, browser, IP address, approximate location, pages viewed, search filters used, listing views and enquiry events, timestamps and error logs.
• Presence information (online/offline, typing, “last seen”, read receipts) shown to the people you chat with.
• Information from cookies and similar storage (section 7).

Information from others

• If you sign in with Google or Facebook, we receive your name, email address, profile picture and provider ID.
• Other Users may provide information about you, for example a landlord adding you as a tenant, or a report or review about you.

2. How and why we use it

We use some automated tools (for example spam scoring and duplicate detection) to flag suspicious activity. A flag leads to restrictions or removal only after human review where the effect on you is significant.

3. What other people can see

• Public: your public profile and listings, including name, profile photo, bio, account type, verified status, ratings and the information you put in a listing. Exact property addresses may be shown approximately on public maps to protect owners’ privacy.
• Contact details: phone, WhatsApp and email are never shown to anonymous visitors. Signed-in Users can send a connection request; the owner decides whether and which details to release.
• Chats: visible to the participants only (and to authorised Staff when investigating a report, abuse or legal matter).
• Rent records: visible only to the landlord and tenant concerned (and authorised Staff for support, abuse or legal reasons). A receipt verification page shows limited details (receipt number, amount, property, dates, landlord name and a masked tenant name) to anyone who holds the receipt’s code.
• Verification documents: stored outside public folders and accessible only to you and authorised verification Staff.

4. Who we share data with

We do not sell personal data. We share it only as follows:

• Other Users, as described in section 3 and as you direct.
• Service providers that process data for us under contract: hosting and infrastructure, email delivery (SMTP provider), maps and geocoding (OpenStreetMap and its tile and search services), content delivery for scripts and styles, sign-in providers (Google, Facebook), analytics and payment processors where enabled.
• Professional advisers, regulators, courts, police and other authorities when required by law or to protect rights, safety and property, including to investigate fraud or abuse.
• Business transfers: if we merge with, are acquired by, or sell assets to another organisation, your data may transfer subject to this Policy.
• With your consent or at your direction.

5. How long we keep data

We keep personal data only for as long as it is needed for the purposes in this Policy, to meet legal, tax and accounting duties, to resolve disputes and to enforce our Terms. In practice:

You can ask us to delete your data at any time (section 8); we will do so unless we must keep it by law or for legitimate legal reasons.

6. How we protect your data

• Passwords are stored using a one-way salted hash (bcrypt); we cannot read them.
• Sessions use secure, HTTP-only cookies; forms are protected against cross-site request forgery; brute-force protection and rate limits apply to sign-in and messaging.
• Uploads are restricted by type and size and checked before storage; verification and payment-proof files are kept private and access-controlled.
• Staff access is role-based and important actions are written to an audit log.
• We recommend that the Platform is operated over HTTPS and we expect our hosting partners to maintain appropriate safeguards.

No system is perfectly secure. Use a strong, unique password, do not share it, and tell us at cosmoselijah@gmail.com about any suspected breach. If a breach affects your rights, we will notify you and the regulator as the law requires.

7. Cookies and similar technologies

We use a small number of cookies and browser storage, mostly essential:

• Session cookie – keeps you signed in (essential).
• Security cookie – protects forms against forgery (essential).
• Notice cookie – shows short success or error messages (essential, expires in seconds).
• Browser storage – remembers items in your compare tray and the rent pop-up you dismissed for this visit (functional).
• Third-party content – map tiles and scripts loaded from third parties may receive your IP address and browser details.

You can block cookies in your browser, but the Platform will not work correctly without the essential ones. Where the law requires consent for non-essential cookies, we will ask for it.

8. International transfers

The Platform serves users across several countries, so your data may be processed in countries other than your own, including where our hosting and service providers operate. Where we transfer personal data internationally, we use safeguards required by applicable law, such as contractual protections and, where relevant, adequacy decisions or standard contractual clauses.

9. Your rights

Depending on where you live, you may have the right to: access the personal data we hold about you; correct it; delete it; restrict or object to certain processing; receive it in a portable format; withdraw consent at any time (without affecting earlier processing); and not be subject to decisions based solely on automated processing that significantly affect you. You can update much of your information, download a copy of your data and delete your account yourself in Account → Profile & security, or request deletion at /delete-account if you cannot sign in. For anything else, email cosmoselijah@gmail.com. We will respond within the time required by law (generally within 30 days) and may need to verify your identity first. We may keep information we are legally required to keep or need to establish or defend legal claims, or which concerns other people’s rights. You also have the right to complain to your data-protection regulator, for example the Nigeria Data Protection Commission, or the authority in your country.

10. Children

The Platform is for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

11. Other people’s data you put on the Platform

If you give us personal data about someone else (for example a tenant’s name and email, or people visible in listing photos), you confirm you have a lawful basis and any required permission to do so, and that you will use it only for the purpose it was shared. Landlords are responsible for how they use their tenants’ information.

12. Changes to this Policy

We may update this Policy to reflect changes in our practices or the law. The “Last updated” date shows the current version; we will tell you about material changes through the Platform or by email.

13. Contact us

Data-protection enquiries and requests: cosmoselijah@gmail.com
Landlordspace, the address published on our contact page.