Privacy Policy

1. Who we are

SureRent Nigeria is the data controller for this platform: we decide what personal data is collected through the website, dashboards, and AI assistant, and for what purposes. Contact us about anything here via the contact page or info@surerent.ng.

2. Data we collect

• Account data. Name, username, email, phone/WhatsApp number, password (stored hashed, never readable), role (renter, agent, admin), and profile details such as photo and agency name.
• Verification & trust data. Email-verification events, password-reset requests, agent identity materials and certification outcomes, listing inspection records, and reports you file.
• Listings & media. Property details, prices, photos, and videos you upload, plus view counts and enquiry metadata.
• Location data. The state and area on your profile; and, only if your device shares it, live coordinates used for nearby matching (you can switch this off anytime in settings).
• Activity data. Saved homes, searches, enquiries, reviews, AI-assistant conversations that you transfer to the team, and support messages.
• Technical data. Device and browser type, IP address and user-agent (kept with consent and security records as evidence), pages viewed, and approximate diagnostics.
• Cookie data. As detailed in our Cookies Policy: strictly necessary storage plus optional analytics and marketing tiers you control.

We do not ask for bank details, card numbers, or ID numbers in routine flows. Anyone requesting them in our name is running a scam — see the inspection rule in our Terms.

3. Why we use it (purposes & lawful bases)

• Running your account (contract): sign-in, verification emails, password resets, saved homes, enquiries, dashboards.
• Trust & safety (legitimate interests + legal obligation): physical verification, agent certification, fraud detection, rate limiting, audit trails, and responding to lawful requests.
• Improving the service (consent, off by default): analytics on which features get used — only if you enable the Analytics tier.
• Relevant communication (consent, off by default): campaign measurement and promotions — only under the Marketing tier.
• Legal compliance (legal obligation): tax, corporate, and data-protection record-keeping.

4. Who sees your data

• Other users — only what the product needs. When you enquire about a listing, the agent receives your name and contact details. Agents' public desks (name, agency, photo, listings, contact line) are visible to renters by design; you control visibility toggles in settings.
• Service providers. Email delivery, cloud hosting and media storage, strictly to operate the platform and bound by contract. Our stack is self-hosted for fonts, styles, and scripts — no advertising trackers ride along.
• Authorities. Only where the law compels us, or to prevent fraud and protect safety.
• Never sold. We do not sell personal data, and marketing measurement never becomes a data sale.

Where processing happens outside Nigeria (cloud infrastructure), we rely on contractual safeguards and keep transfers to what running the service requires.

5. Cookies & similar storage

Three tiers: Necessary (always on — sign-in, CSRF protection, your consent record itself), Analytics and Marketing (both off until you switch them on). Open Cookie settings in the site footer anytime to review or change tiers; the dialog shows exactly what each tier does. Full detail lives in the Cookies Policy.

6. How long we keep it

• Account data: for the life of your account. Self-service deletion starts a short, cancelable grace period (72 hours by default); afterwards personal data is erased or irreversibly anonymised.
• Consent & safety records: acceptance timestamps, verification evidence, and fraud flags are kept to the minimum the law and platform safety require.
• Logs & analytics: short-lived and aggregated where possible; optional-tier data stops the moment you switch the tier off (history already collected is not rewritten).

7. Your rights & how to use them

Under the NDPA you hold rights of access, correction, erasure, portability, objection, and withdrawal of consent, plus the right to lodge a complaint with the Nigeria Data Protection Commission. On SureRent you can act on them directly:

• See & take your data: use Download My Data in your profile for a portable copy.
• Fix it: edit profile, agency, and contact details in settings at any time.
• Delete it: self-service deletion with email confirmation and a cancelable grace window.
• Change tracking consent: Cookie settings — tiers apply immediately going forward.
• Anything else: write via the contact page or info@surerent.ng; we respond to rights requests within the statutory window.

8. Security

Passwords are hashed (never stored readable), sessions are hardened (HttpOnly, SameSite, Secure in production), uploads are scanned and re-encoded, traffic is encrypted in transit, and sensitive actions are rate-limited. If we ever confirm a breach affecting you, we will notify you and the authorities as the law requires. No system is impregnable — protect your credentials and report anything suspicious immediately.

9. Children

SureRent is for users with legal capacity to contract, and we do not knowingly collect children's data. If you believe a child has provided data, contact us and we will delete it promptly.

10. Changes & contact

Material changes trigger an in-product re-consent notice for signed-in users; the current version always lives on this page with its effective date. Questions about this policy, your data, or these rights: contact page or info@surerent.ng.