Privacy Policy

1. Who we are and how to contact us

Props Link Africa Limited (“PropsLink”, “we”, “us”) is the data controller for the marketplace services described here. Our operating location is Lagos, Nigeria. We connect property owners and registered agencies with people seeking to buy or rent; we do not currently manage properties.

This notice covers our website, mobile applications, APIs and related support. Contact support@propslinkapp.com for privacy questions, requests or business correspondence.

We process personal data subject to the Nigeria Data Protection Act 2023 and applicable Nigeria Data Protection Commission (NDPC) requirements.

2. Information we handle

• Accounts and authentication: name, email, phone number, profile, role, sign-in identifiers, password hashes, verification and session records, and two-factor authentication settings. Social sign-in, when available, supplies the profile and identity information needed to sign you in.
• Verification: identity details and documents submitted for checks, which may include NIN/BVN, government ID, selfies and corporate or agency documents, plus verification results and audit records.
• Listings and enquiries: property information, addresses, coordinates, listing photos or videos, favourites, inspections, bookings, chats, contact-sharing choices, reports and support requests. Uploaded files may contain embedded metadata; avoid uploading unnecessary personal information.
• Payments: transaction amounts, fees, status, provider references, receipts, wallet records and bank details used for payouts. Payment providers collect payment-card credentials through their own payment interfaces; we do not store full card details.
• Device and service information: push tokens, app/platform versions, delivery status, network and security information, and technical error diagnostics. Public listings and information you choose to share can be seen by other users.

3. Purposes and legal bases

We use information to operate accounts, publish listings, arrange enquiries and inspections, process payments and withdrawals, provide support, prevent fraud, enforce platform rules and keep services reliable. Depending on the activity, our basis is performance of a contract or steps you request before a contract, compliance with applicable legal obligations, legitimate interests subject to your rights, or consent where required.

Where processing depends on consent, you can withdraw it without affecting the lawfulness of earlier processing. Device permission is separate from permission to send marketing or share information with another user.

4. Location, camera and media permissions

With your permission, location supports features you choose, including nearby property search, selecting a listing location and land measurement. We do not use background location tracking. You can deny or revoke permission and use manual location/address entry where available.

Camera and photo-library access support profile and listing uploads you choose. Granting permission does not give us unrestricted access to your library. Images, video or documents you upload are processed to provide the requested feature. Review what a photo or document reveals before uploading it.

5. Google Maps and optional address lookups

Loading a Google map sends map-area requests and connection information, such as IP address and browser/device information, to Google. Optional Google address search sends the entered search text and selected place through our server to Google; an explicit address-lookup action sends the selected coordinates.

Manual address entry and our database-backed nearby-property distance searches do not require Google address lookups. Loading a map, using an optional lookup and granting device location permission are separate choices. Opening external directions shares the destination with the maps app or website you select. See Google’s Privacy Policy.

6. Notifications, messages and choices

We use email, SMS, in-app notices and, if enabled, push notifications for verification, security, enquiries, bookings, payment and payout updates, and other service messages. Push delivery uses Expo and the relevant Google Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS). These services process device/push identifiers and the notification content necessary for delivery.

SMS delivery currently uses eBulkSMS; email uses our configured email-delivery provider. These providers receive the destination contact details and message content needed to send the message. Notification previews can be visible on a device’s lock screen; use device settings to limit previews.

You can manage available communication preferences in the app and disable push notifications in device settings. This does not delete your account or stop essential security, payment or account-service communications through other necessary channels. Marketing choices are separate, and you can contact support to object to marketing. Messages and contact details you intentionally share are visible to the recipient.

7. Service providers and other disclosures

• YouVerify: identity and verification checks using the information needed for the selected check.
• Paystack and banking partners: payments, refunds, account verification and payouts.
• Cloudinary: storage and delivery of uploaded media.
• Contabo: application and database hosting. Storage, backup and email providers may also process data needed to operate their configured services.
• Google Maps, Expo, Google and Apple: the mapping, notification and optional sign-in functions described in this notice. Expo update services may receive app/runtime and connection information when the mobile app checks for or downloads an update.

Authorised staff can access information needed for support, moderation, finance, security or administration. We may disclose information to a transaction counterparty as needed for the transaction, with your direction, or to respond to applicable legal requirements and protect against fraud or abuse. Providers’ own notices explain their independent processing where applicable.

8. Error reporting and security diagnostics

We use a privately hosted GlitchTip service to investigate errors from the website, backend and mobile app. Diagnostic events can include error types, stack traces, route patterns, timestamps, release/environment labels and app/device information. Reporting filters are designed to exclude credentials, message bodies, payment secrets and direct personal identifiers; please do not put sensitive information into error reports.

Authorised administrators review reports through the admin interface. Error events are configured for 60-day retention, with scheduled cleanup; ongoing issue summaries and counts can outlast individual events. Session replay and performance tracing are disabled in the current configuration. This event-retention policy is separate from financial records, security logs and backups.

9. Retention and account deletion

Account and listing information is kept while needed to provide the service, resolve outstanding obligations or meet applicable retention requirements. Message cleanup defaults to 372 days (approximately one year). Cleanup runs on a schedule rather than deleting every record at an exact second. Legal holds or unresolved disputes may require specific records to be retained longer.

You can request deletion from account settings or through our account-deletion page, including if you cannot sign in. Identity verification may be needed. Available wallet funds, pending payments, refunds or withdrawals, active rentals or other outstanding transactions can prevent immediate completion; support can help resolve them.

Deletion removes or anonymises profile and access information, removes push registrations and takes down your listings. We retain limited financial, transaction, verification and audit records where needed for legal, fraud-prevention or dispute purposes. Deletion is not a promise to erase every historical record or another party’s copies immediately. Backups expire through their configured retention and cleanup processes.

10. Cookies and local storage

We use cookies and browser/device storage for sign-in, security, preferences and notice acknowledgement. Browser controls can delete or restrict cookies, but doing so may affect sign-in or other features. Acknowledging a cookie notice is not consent to unrelated marketing or optional tracking. Optional third-party features can make their own requests and use storage under their own notices.

11. Security and processing outside Nigeria

We use access controls, authentication checks, privacy filtering and other technical and organisational measures to protect information. No system or transmission is completely secure. Contact support promptly if you suspect unauthorised access to your account or information.

Hosting and service providers may process information outside Nigeria. Such transfers are subject to applicable data-protection requirements. Contact us for information about the destinations, providers and safeguards relevant to your data.

12. Your rights and complaints

Subject to applicable law, you may request access, correction, deletion, portability or restriction of your personal data, object to processing, withdraw consent and raise concerns about decisions involving your information. Contact support@propslinkapp.com. We may ask for proportionate information to confirm your identity, not passwords or payment secrets.

You can complain to the Nigeria Data Protection Commission without losing other remedies available to you.

13. Age restrictions and changes

The marketplace is intended for adults aged 18 and above. Contact us if you believe a child’s data has been submitted so we can investigate and take appropriate action.

We will update the effective date when this notice changes and provide additional notice or seek fresh consent where required. Please read it alongside our Terms & Conditions.