Privacy Policy

Account information — name, email, phone number, role (buyer, landlord, agent, contractor, staff), and password (which we store as a one-way bcrypt hash, never in plain text).

Identity verification — when KYC is required (for agents, landlords, or large transactions), we collect government-issued ID details such as BVN, NIN, or driver's licence. Verification is processed through our partners; we store only the verification result, not the raw documents.

Property & transaction data — listings you create, properties you view or shortlist, inspections you book, deposits and rent you pay, and contracts you sign.

Payment information — handled by Paystack on our behalf. We receive transaction references and amounts; we never see or store your card numbers, CVVs, or bank login details.

Device & usage data — IP address, browser type, device characteristics (a hashed fingerprint used to detect account sharing), and pages visited. Used for security, fraud detection, and product improvement.

Location data — when you use attendance clock-in, your latitude and longitude are recorded for office-perimeter verification. Optional; you can decline location access at the browser level.

Communication content — messages you send through our inbox, WhatsApp Business integration, or support channels.

Service delivery — running the platform features you signed up for (listings, contracts, payments, attendance, etc.).

Security & fraud prevention — detecting impersonation, unauthorized access, payment fraud, and listing scams.

Communication — sending transactional emails (inspection confirmations, payment receipts), WhatsApp updates if you opt in, and important policy changes.

Legal & regulatory compliance — meeting tax, anti-money-laundering, and property-registration obligations under Nigerian law.

Product improvement — analysing aggregated, non-identifying patterns to fix bugs and design better features.

We use trusted processors to deliver parts of the service. Each handles only the data they need, under contractual data-protection obligations:

• Paystack — payment processing, bank verification, subaccount management for split payments.
• Cloudinary — storage and delivery of images, documents, and uploads.
• Dojah — identity verification (KYC) using BVN, NIN, or other government-issued IDs.
• WhatsApp Business (Meta) — sending and receiving messages to your WhatsApp number when you have opted in.
• MongoDB Atlas — primary database hosting, with data residency aligned to NDPC guidance.
• Google Maps — geocoding office addresses for the attendance feature.
• Tenant organisations — if you are a staff member, agent, contractor, or customer of a tenant on Reaxis, that tenant's administrators can see data you generate within their workspace (contracts you sign with them, inspections you book through them, etc.).

We do not sell your personal data, run advertising against it, or share it with third parties for marketing purposes.

Under Nigerian data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete your data, subject to legal obligations to retain certain transaction records.
• Restriction — limit how we process your data while a complaint is being investigated.
• Portability — receive your data in a machine-readable format to transfer elsewhere.
• Objection — object to processing for direct marketing or based on legitimate interest.
• Withdraw consent — where processing is based on consent (e.g. WhatsApp opt-in), withdraw it at any time.

To exercise any of these rights, email privacy@reaxis.africa . We respond within 30 days.