Privacy Policy

This is a plain-language summary, not legal advice. RentFlex.ng (RentFlex Technologies Ltd) processes personal data under the Nigeria Data Protection Act 2023 (NDPA). The binding policy and the items flagged below — our Data Protection Officer, exact retention periods, cross-border transfer safeguards, and NDPC registration — are being confirmed with a qualified Nigerian lawyer / registered DPCO.

What we collect

Account: name, phone, email, city/state. Screening (tenants): employer, job title, monthly income, a government ID (NIN, driver's licence or passport), the last 4 digits of that ID, employment proof, and prior-landlord references. Transactions: offers, messages, lease terms, your e-signature, and payment records. Payouts (landlords): a bank account, verified by name with Paystack.

Why we use it (lawful bases)

To provide the service and form your tenancy (contract); to verify identity, reduce fraud and run the marketplace (legitimate interest); to screen an application you submit (your consent, given at screening); and to keep records the law requires (legal obligation).

Who we share it with

Providers that run the platform: Supabase (database, sign-in, file storage), Paystack (payments and bank-account name checks), and Termii (SMS). Screening documents are private and shown only to a landlord you choose to apply to. We do not sell your personal data. Some providers may process or store data outside Nigeria; the transfer safeguards are being confirmed.

How long we keep it

We keep personal data while your account is active. Signed leases and payment records are kept where the law requires, even after an account closes. Other data is deleted or anonymised when no longer needed or on request.

Your rights

Under the NDPA you can access, correct, export, delete or restrict your data, object to processing, and withdraw consent. Exercise these in the app at Your data & privacy, or email hello@rentflex.ng. To stop outreach to a phone number that has no account, use Do not contact me.

Outreach to property owners

We may contact landlords whose listings are publicly available to offer to list their property. You can opt out at any time via the link in any message or at Do not contact me, and we record and honour it. The lawful basis for unsolicited outreach is being confirmed with counsel; such outreach stays off until that is settled.

Analytics

We use no advertising trackers by default. If website analytics (Google Analytics 4) is enabled, we ask Google not to store your full IP address. No cookie-based advertising is used.

Complaints

You may complain to the Nigeria Data Protection Commission (NDPC); confirm its current contact details and procedure on the NDPC's official channels.