Privacy Policy

Version 2026-07 · Last updated July 2026

This policy explains how TENANTO.NG LIMITED (RC 9594949), operator of Tenanto, collects, uses, shares and protects your personal data across our Stay, Rent and Buy services, in line with the Nigeria Data Protection Act, 2023. Please read it alongside our Terms of Service.

1. What we collect

Account details: name, email, phone, and password (stored only as a secure hash).
Identity & biometric data: your NIN and/or BVN, a government ID document, and a selfie/liveness capture used to confirm you are a real, verified person. Biometric data (your facial image and liveness) is sensitive personal data.
Listing & transaction data: properties you list or view, bookings, offers, viewing requests, chats, and (for sellers/landlords) ownership documents.
Payment & payout data: your bank account for payouts, and transaction references. We never see or store your full card details, those are handled by our licensed payment partner.
Usage & device data: pages viewed, actions taken, device/browser information, approximate location and log/IP data used for security.

2. Why we use it (lawful basis)

To perform our contract with you: operating listings, bookings, escrow payments, payouts and messaging.
To meet legal obligations and prevent fraud: identity verification (via licensed providers), anti-money-laundering checks, and keeping records.
With your consent: biometric verification and marketing messages, which you can withdraw at any time.
For our legitimate interests: securing the platform, detecting abuse, and improving the service.

3. How we protect it

Sensitive identifiers (NIN/BVN) are encrypted at rest; passwords are hashed; data is transmitted over HTTPS.
Access to personal data is restricted, and sensitive admin actions are audit-logged.
A property’s exact address is gated: it is revealed only after a confirmed booking (stay) or a confirmed viewing (rent/buy).
Sensitive actions (e.g. cash-outs, payout-bank changes) are protected with step-up verification and cooling-off holds.

4. Who we share it with

Identity verification partners (e.g. Prembly) to confirm your NIN/BVN and match your face.
Payment partner (Paystack) to process payments, payouts and refunds.
Infrastructure and communication providers (e.g. Cloudinary for media, and our email provider) strictly to run the service.
Law enforcement or regulators where legally required. We do NOT sell your personal data.

5. How long we keep it

We keep your data while your account is active and for as long as needed to provide the service.
Some records (identity checks, transaction and audit logs) are retained after account closure to meet legal, tax, dispute and anti-fraud obligations, typically for the period required by Nigerian law (audit logs for a minimum of 1 year).
When retention no longer applies, data is deleted or irreversibly anonymised.

6. Your rights (Nigeria Data Protection Act, 2023)

You can access, correct, or request deletion of your personal data from Settings or by contacting us.
You can object to or restrict certain processing, request a copy of your data (portability), and withdraw consent (including for biometric processing), subject to the effect it has on services that depend on verification.
We respond to verified requests in line with the Nigeria Data Protection Act, 2023 (and its regulations). You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

7. Cross-border transfers, cookies & children

Some processors may store or process data outside Nigeria; where they do, we require appropriate safeguards as required by the NDPA.
We use essential cookies/local storage to keep you signed in and secure the site; we do not use them to sell your data.
Tenanto is not intended for children under 18. We do not knowingly collect their data.

8. Data controller & contact

The data controller is TENANTO.NG LIMITED (RC 9594949), Abuja, Nigeria.
For any privacy request or to reach our data protection contact, email info@tenanto.ng or use in-app help.