Privacy Policy

We operate the LandlordPort, a discovery marketplace for property in Jos and Plateau State. For the personal data described in this policy, we are the data controller: we decide why and how that data is processed. Where another user (such as the advertiser who receives your inquiry) decides how your contact details are used afterwards, they act as a separate controller for that use.

Our contact routes are set out in section 12. We operate from Jos, Plateau State, Nigeria.

Depending on how you use the marketplace, we collect:

• Account details. Your name, email address, password (stored only as a salted cryptographic hash) and, for business accounts, your business or trading name, organisation details and role in a workspace.
• Listing information. Property descriptions, prices, photographs, availability calendars, documents an advertiser chooses to upload for verification, and location details. Location is captured as a typed or selected address (state, LGA, area and neighbourhood), not from your device's GPS.
• Messages and inquiries. The name, contact details, message and preferred channel you send to an advertiser, plus in-app conversations between seekers and advertisers, and support tickets you raise.
• Stays and reservations. Requested dates, room or property choices, reservation codes (JPM-XXXXXX), wallet transactions and receipts for short-let and hotel stays.
• Activity you create. Saved searches, favourites, recently viewed properties, reviews you post, properties you report, and notifications you receive.
• Device and log data. IP address, browser user agent, request times and security events recorded with your session and in our audit logs, used for sign-in, abuse prevention and debugging.
• Payment records. Top-ups, plan and boost purchases, wallet entries and refunds processed through our payment providers. We do not see or store your full card or bank credentials; the payment provider handles those.

We do not collect precise device location. Where a listing shows a point on a map, that coordinate was supplied with the listing, not taken from your device.

• From you: when you create an account, complete a profile, publish or submit a listing, send an inquiry, post a review, make a reservation, top up a wallet, raise a support ticket or apply for verification.
• Automatically: cookies, local storage and server logs record your session, preferences and activity as you use the marketplace (see section 9).
• From other users: for example, when an advertiser or tenant invites a colleague or team member to a workspace or tenancy, they give us that person's name and email address so we can send the invitation.
• From service providers: payment providers tell us whether a transaction succeeded, and our email provider tells us whether a message was delivered.

We use personal data for the following purposes and legal bases:

• To run the service (performance of a contract): creating and securing accounts, publishing listings, delivering messages and inquiries, managing reservations and wallet activity, and providing support.
• To keep the marketplace safe (legitimate interests): reviewing listings before publication, moderating reports and reviews, detecting fraud and abuse, rate limiting, securing sign-in, and maintaining audit logs of moderation and account actions.
• To communicate with you (performance of a contract, and consent where the law requires it): transactional email such as verification links, invitations, reservation confirmations and receipts, plus in-app notifications you can manage in your settings.
• To improve the product (legitimate interests): understanding which pages, searches and features are used, so we can fix problems and prioritise improvements. Where we introduce optional analytics that are not strictly necessary, we will ask for consent first.
• To meet legal obligations (legal obligation): keeping accurate business and transaction records, responding to lawful requests from authorities, and establishing or defending legal claims.

Where we rely on consent (for example for certain communications), you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

We do not sell your personal data. We share it only where needed:

• The listing owner. When you send an inquiry or start a conversation, the advertiser receives the name, contact details and message you chose to send, so they can respond to you.
• Our teams. Staff who moderate listings, reports, reviews and verification applications access content only as needed for their role, and their actions are recorded in audit logs.
• Service providers. Payment providers process top-ups, plan and boost purchases; our email provider delivers transactional messages; hosting, storage and AI assistant providers process data on our instructions under confidentiality obligations. The AI assistant receives your name, role and your question so it can answer within your permissions.
• Other users where you direct us: for example, sharing a listing or a saved search with someone.
• Legal and regulatory recipients: courts, regulators or law enforcement where we are required by law to disclose, or where disclosure is necessary to protect the rights, safety and property of users and the public.
• Business transfers: a successor organisation in connection with a merger, acquisition or sale of assets, subject to this policy or a notice of any change.

Some of our service providers (including email, hosting and AI providers) may process personal data outside Nigeria. Where we transfer your personal data internationally, we do so only where the destination provides an adequate level of protection, or where appropriate safeguards such as contractual protections are in place, as required by the NDPA and NDPR. You may contact us for more information about the safeguards that apply to a particular transfer.

We keep personal data only for as long as we need it for the purpose collected:

• Active account data is kept while your account is open and used; session records are short-lived (sessions expire after 7 days) and can be revoked at any time.
• Listing, message, reservation and wallet records are kept while they are needed to operate the marketplace, honour reservations, support disputes and maintain transaction history.
• Business, billing and audit records are kept for the periods required by Nigerian tax, accounting and record-keeping law.
• Moderation and security records (such as reports, rejections and audit entries) are kept for a reasonable period so we can investigate abuse and answer accountability questions.

When data is no longer required, we delete it or irreversibly anonymise it. You can ask us to delete your personal data under section 10, subject to records we must keep by law.

• Passwords are stored only as salted cryptographic hashes (never in plain text), and session tokens are stored hashed, so the raw value exists only in your own cookie.
• Sign-in sessions expire automatically, and requests that change state are checked against our own origin to block cross-site request forgery.
• Rate limits, role-based permissions and server-side checks guard sensitive actions: the UI never decides access on its own.
• Moderation, account and financial actions are written to an append-only audit log so that changes can be traced.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant regulator as required by the NDPA.

We use strictly necessary cookies to keep you signed in (a session cookie that identifies your account and expires after 7 days) and to protect requests against forgery. We do not use third-party advertising cookies, and we do not sell browsing profiles.

We also use local storage on your device to remember preferences and unobtrusive UI state: recently viewed properties, onboarding progress, and notes you have dismissed. This data stays in your browser; recently viewed history for signed-in users is also synced to your account so it follows you across devices. Favourites and saved searches are stored against your account, not in local storage; guests are asked to sign in before saving.

You can block or clear cookies and local storage in your browser settings at any time. Blocking strictly necessary cookies will sign you out and prevent sign-in until you allow them, but you can still browse listings as a guest.

Under the Nigeria Data Protection Act 2023 and the NDPR, you have the right to:

• Access the personal data we hold about you, and know how it has been used and shared;
• Correct inaccurate or incomplete data (much of this you can update yourself in your profile and listings);
• Delete your data, subject to records we must retain by law or where another lawful basis continues to apply;
• Object to processing based on legitimate interests, and to direct marketing at any time;
• Data portability: receive your data in a structured, commonly used, machine-readable format where technically feasible;
• Withdraw consent where processing is based on consent, at any time;
• Restrict processing while a complaint or request is being considered, and claim compensation for damage suffered as a result of a breach.

To exercise any of these rights, use the contact routes in section 12. We may need to verify your identity before acting on a request, and we will respond within the period required by the NDPA. If you are unhappy with how we handle your data, you also have the right to complain to the Nigeria Data Protection Commission (NDPC).

The marketplace is not directed at children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

We may update this policy from time to time. The version marker and effective date at the top of this page always show the version currently in force, and we will give reasonable notice of material changes by email or through the marketplace before they take effect.

LandlordPort, operated by Arkspan Systems Company Limited (CAC Reg: Software As A Service). Registered office: Jos, Plateau State, Nigeria.

Signed-in users can reach us by raising a support ticket from the Help page in the advertiser dashboard or tenant portal. If you do not have an account, use the contact route published on our website, or reply to an email we have sent you, as replies are routed to our team. Please say clearly that your request concerns personal data, and which right from section 10 you want to exercise, so we can act on it quickly.

Our related terms are set out in the Terms of Service.