Privacy Policy

• Account data: email, full name, phone number, role (tenant / landlord / agent), preferred language, and the version of our T&Cs you accepted.
• Lister profile (landlords + agents): profile image link, years in real estate, primary locality, WhatsApp / alternate contact details, and a fee schedule.
• Verification documents (Ghana Card / passport / real-estate licence / business certificate) uploaded for the Verified badge.
• Listings: title, description, location, photos, videos, pricing, amenities.
• Lead-capture submissions: when you fill the WhatsApp / Phone / Email form on a listing, we record the name and contact details you typed, the channel you picked, the message (for email leads), and which property it was for.
• Browsing activity: favourites, saved searches, and read/unread state for notifications.

In plain terms: your phone number and the contact details tenants leave for you are scrambled before they are saved, so they cannot be read straight out of our database. Your password is stored in a form that even we cannot turn back into your password. Your ID documents are not on the public internet. The specifics, if you want them:

• Phones, WhatsApp, alt phone, and tenant lead PII are encrypted at the column level using Fernet with a key we never log.
• We also keep a one-way HMAC-SHA256 lookup hash of phone numbers so operators can find a record without us decrypting the live data.
• Passwords are argon2id-hashed. We can never see or recover your password. We only verify it.
• Verification documents live in a private object-storage bucket gated by short-lived signed URLs. Public listing photos live in a separate public-read bucket with EXIF stripped.
• Your data is kept on a server run by OVHcloud in Europe, and our encrypted backups are stored with Cloudflare.

• Public: the listing title, description, photos, price, location, lister’s self-described role (landlord / agent), verification badge status, profile image, years in real estate, and fee schedule.
• The lister of a property: sees the name + contact details + message of any tenant who filled the contact form on that property. They do not see your broader account data.
• Admins: see verification documents during review (audit-logged), feedback / support / callback submissions, and listings that tenants have reported.
• Other tenants: see nothing about you.

• Sell your data to third parties. Ever.
• Place tracking cookies for advertisers. We use session cookies only, which are essential under Ghana’s Data Protection Act and exempt from the consent banner.
• Surface your contact details on a listing publicly. Tenants must fill the contact form, which generates a single audited lead row.

• Export: one-click JSON export of your profile, listings, conversations, payments, and leads from Settings.
• Delete: you can delete your account in one click in Settings. It goes into a 30-day grace period first, and signing in during that time brings it back. After 30 days we permanently remove your name, email address and phone numbers from your account, unlink your profile picture and delete your saved searches. Your listings and messages stay, anonymised, so the people you dealt with still have their conversations. Older copies in our encrypted backups are replaced within 30 days.
• Correction: edit any of your data in Settings. Phone-number changes require the verified-email step.

• OVHcloud: hosts the website, the database and uploaded files (listing photos and verification documents) on a server we rent in Europe.
• Cloudflare R2: holds our nightly encrypted backups of the database and uploaded files.
• Paystack: payment processing for subscriptions and listing credits. Only the order and customer details a payment needs are sent.
• Resend: sends account emails (email verification, password resets, security alerts and lead notifications).
• Google: optional sign-in. If you use it, we receive your name, email address and profile picture only.