Privacy Policy

1. Who we are

NaijaVerify is a property verification platform operated in Nigeria. We act as the data controller for the personal data we collect through our platform at naijaverify.org.

Data Protection Officer contact: privacy@naijaverify.org

2. What data we collect

We collect and process the following categories of personal data:

• Identity data: full name, National Identification Number (NIN)
• Contact data: email address, phone number
• Financial data: payment references, invoice amounts (we do not store card details)
• Property data: property addresses, title instrument numbers, survey plan references
• Verification documents: title deeds, survey plans, and other documents you upload
• Technical data: IP address, browser type, device information
• Usage data: how you interact with the platform

3. Legal basis for processing

We process your data on the following legal bases under the Nigeria Data Protection Act 2023:

• Contractual necessity: to deliver the verification service you requested
• Legal obligation: maintaining audit trails as required by law
• Legitimate interests: fraud prevention, platform security, and service improvement
• Consent: marketing communications (separately opted in)

4. How we use your data

We use your personal data to deliver verification services, communicate about your requests, process payments, comply with legal obligations, and improve the platform. We never sell your data to third parties.

5. Data sharing

We share data with: licensed field agents and partners (property address only, never your personal details), Paystack (payment processing), and Supabase (data storage on AWS EU West infrastructure). We never sell data to third parties.

6. Data retention

• Active client data: duration of relationship plus 7 years
• Verification certificates: permanent retention (legally required records)
• Payment records: 7 years (CBN/FIRS requirements)
• System logs: 3 years
• Deleted accounts: personal data anonymised within 30 days of deletion request

7. Your rights

Under the Nigeria Data Protection Act 2023, you have the right to access, rectify, erase, restrict processing, port your data, object to processing, and withdraw consent. To exercise any right, email privacy@naijaverify.org. We will respond within 30 days.

8. Cookies

We use session cookies (strictly necessary for login) only. We do not use advertising, tracking, or third-party analytics cookies.

9. Cross-border transfers

Your data is stored on Supabase infrastructure hosted on AWS in the EU West region. This transfer is conducted on an adequacy basis.

10. Complaints

If you are unsatisfied with how we handle your data, you may complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

11. Contact

Data protection matters: privacy@naijaverify.org

This policy will be updated when required. Registered users will be notified of material changes.