1. Who this notice covers
This notice covers renters, landlords, buyers, developers and investors who use the Dwellr website and pilot application. Dwellr determines how account and property information is used for the workflows described below.
2. Information we collect
- Account details such as verified phone number, name, email, selected workspace and profile photograph.
- Renter KYC details such as occupation, approximate yearly income, current address, previous reference, household size and guarantor contact details.
- NIN is requested only in an invited renter KYC flow. The application stores only the final four digits and the submission status; the full NIN is not kept in the Dwellr database.
- Property, tenancy, rental, listing, valuation, inspection, service-request and payment-plan information supplied by users.
- Uploaded photographs and documents, notification preferences, Red Box observations and basic security/session records.
3. Why we use it
We use information to verify accounts, connect a renter with the correct landlord and property, manage listings and tenancies, deliver requested documents, send reminders, respond to service requests, protect the application and meet contractual or legal obligations. Where consent is the basis, you may withdraw it for future processing.
4. Who can see or process it
- Landlords see only renter applications and tenancy information connected to their own properties.
- Renters see only their own tenancy records and available marketplace listings.
- Cloudflare hosts the application and structured records; Brevo delivers account verification and service emails; Supabase is used for protected document storage where applicable.
- Providers receive only the information required to perform their service. Dwellr does not sell personal information or use it for third-party advertising.
5. Retention
Secure sessions expire after 30 days. Red Box observations are permanently deleted after eight days. Expired invitations and operational records are retained only as needed for security, dispute handling and the property relationship. Account, tenancy and document records remain while the pilot account is active or until a valid deletion request is completed, subject to lawful retention duties.
6. Security
Account access uses SMS verification and an encrypted, HTTP-only session cookie. Private documents are not displayed directly in the dashboard; an authorised user requests a time-limited link sent to their verified email. Access to properties, applications, images and documents is checked on the server.
7. Your rights
Subject to the Nigeria Data Protection Act 2023, you may ask to be informed, access your information, correct it, object or restrict processing, request portability or erasure, and seek human review of an automated decision. You may also complain to the Nigeria Data Protection Commission.
8. Requests and concerns
During the private pilot, open your Dwellr Profile or use the in-app concierge to request access, correction, export or deletion. Do not send NIN, passwords, OTP codes or private documents through ordinary email or chat.
9. Pilot notice
This operational notice is designed for the family pilot and should be reviewed by a Nigerian data-protection professional before a full public launch or large-scale KYC processing.